bfbeersjr opened a new issue, #13689: URL: https://github.com/apache/apisix/issues/13689
### Current Behavior `yum install -y apisix-3.17.0` is failing due to a GPG signature verification error. Disabling GPG signature verification is a viable workaround. One of the GPG keys downloaded from `https://repos.apiseven.com/KEYS` expired on 08 July 2026. ```bash # curl -LOSs https://repos.apiseven.com/KEYS # gpg --list-options show-sig-expire --import-options show-only --import KEYS pub rsa4096 2021-01-20 [SC] 3CCCEC586D4F1D2635A992429097DDAE79882014 uid Joey Ma (GPG Key) <[email protected]> sub rsa4096 2021-01-20 [E] pub rsa4096 2021-11-10 [SC] 713F1A8F45E02766DBBABD64B44C2B6296C07346 uid APISIX Publisher <[email protected]> sub rsa4096 2021-11-10 [E] pub rsa3072 2022-07-08 [SC] [expired: 2024-07-07] 22E179579FBD69F3812094DCA85CD39D7F829327 uid zhaoshirui <[email protected]> pub rsa3072 2024-07-08 [SC] [expired: 2026-07-08] 1580F1E689851C11EC61590D76A23BCCEF915680 uid chenjunxu <[email protected]> ``` ### Expected Behavior _No response_ ### Error Logs _No response_ ### Steps to Reproduce ```bash [root@9b84a45de1de /]# cat << EOF > /etc/yum.repos.d/apache-apisix.repo > [release] > name=Apache APISIX Repository for Redhat > baseurl=https://repos.apiseven.com/packages/redhat/\$releasever/\$basearch > skip_if_unavailable=False > gpgcheck=1 > repo_gpgcheck=1 > gpgkey=https://repos.apiseven.com/KEYS > enabled=1 > enabled_metadata=1 > EOF [root@9b84a45de1de /]# yum update -y && yum install -y apisix Apache APISIX Repository for Redhat 324 B/s | 659 B 00:02 Apache APISIX Repository for Redhat 9.0 kB/s | 11 kB 00:01 Importing GPG key 0x79882014: Userid : "Joey Ma (GPG Key) <[email protected]>" Fingerprint: 3CCC EC58 6D4F 1D26 35A9 9242 9097 DDAE 7988 2014 From : https://repos.apiseven.com/KEYS Importing GPG key 0x96C07346: Userid : "APISIX Publisher <[email protected]>" Fingerprint: 713F 1A8F 45E0 2766 DBBA BD64 B44C 2B62 96C0 7346 From : https://repos.apiseven.com/KEYS Importing GPG key 0x7F829327: Userid : "zhaoshirui <[email protected]>" Fingerprint: 22E1 7957 9FBD 69F3 8120 94DC A85C D39D 7F82 9327 From : https://repos.apiseven.com/KEYS Importing GPG key 0xEF915680: Userid : "chenjunxu <[email protected]>" Fingerprint: 1580 F1E6 8985 1C11 EC61 590D 76A2 3BCC EF91 5680 From : https://repos.apiseven.com/KEYS Apache APISIX Repository for Redhat 1.6 kB/s | 659 B 00:00 Error: Failed to download metadata for repo 'release': repomd.xml GPG signature verification error: Bad GPG signature ``` Disabling GPG signature verification is a viable workaround. ```bash [root@9b84a45de1de /]# cat << EOF > /etc/yum.repos.d/apache-apisix.repo > [release] > name=Apache APISIX Repository for Redhat > baseurl=https://repos.apiseven.com/packages/redhat/\$releasever/\$basearch > skip_if_unavailable=False > gpgcheck=0 > repo_gpgcheck=0 > gpgkey=https://repos.apiseven.com/KEYS > enabled=1 > enabled_metadata=1 > EOF [root@9b84a45de1de /]# yum update -y 2>&1 >/dev/null [root@9b84a45de1de /]# yum install -y apisix Last metadata expiration check: 0:00:39 ago on Fri Jul 10 17:46:45 2026. Dependencies resolved. ====================================================================================================================================================== Package Architecture Version Repository Size ====================================================================================================================================================== Installing: apisix x86_64 3.17.0-0.ubi9.6 release 52 M Installing dependencies: cyrus-sasl x86_64 2.1.27-22.el9 sas-rhel-9-baseos 71 k cyrus-sasl-devel x86_64 2.1.27-22.el9 sas-rhel-9-appstream 111 k libpkgconf x86_64 1.7.3-10.el9 sas-rhel-9-baseos 37 k libyaml-devel x86_64 0.2.5-7.el9 sas-rhel-9-codeready 165 k openldap-devel x86_64 2.6.8-4.el9 sas-rhel-9-appstream 750 k pkgconf x86_64 1.7.3-10.el9 sas-rhel-9-baseos 45 k pkgconf-m4 noarch 1.7.3-10.el9 sas-rhel-9-baseos 16 k pkgconf-pkg-config x86_64 1.7.3-10.el9 sas-rhel-9-baseos 12 k Transaction Summary ====================================================================================================================================================== Install 9 Packages Total download size: 53 M Installed size: 205 M Downloading Packages: (1/9): libpkgconf-1.7.3-10.el9.x86_64.rpm 171 kB/s | 37 kB 00:00 (2/9): pkgconf-1.7.3-10.el9.x86_64.rpm 202 kB/s | 45 kB 00:00 (3/9): pkgconf-m4-1.7.3-10.el9.noarch.rpm 1.1 MB/s | 16 kB 00:00 (4/9): pkgconf-pkg-config-1.7.3-10.el9.x86_64.rpm 752 kB/s | 12 kB 00:00 (5/9): cyrus-sasl-2.1.27-22.el9.x86_64.rpm 2.5 MB/s | 71 kB 00:00 (6/9): cyrus-sasl-devel-2.1.27-22.el9.x86_64.rpm 5.5 MB/s | 111 kB 00:00 (7/9): openldap-devel-2.6.8-4.el9.x86_64.rpm 12 MB/s | 750 kB 00:00 (8/9): libyaml-devel-0.2.5-7.el9.x86_64.rpm 8.7 MB/s | 165 kB 00:00 (9/9): apisix-3.17.0-0.ubi9.6.x86_64.rpm 977 kB/s | 52 MB 00:54 ------------------------------------------------------------------------------------------------------------------------------------------------------ Total 998 kB/s | 53 MB 00:54 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: cyrus-sasl-2.1.27-22.el9.x86_64 1/9 Installing : cyrus-sasl-2.1.27-22.el9.x86_64 1/9 Running scriptlet: cyrus-sasl-2.1.27-22.el9.x86_64 1/9 Installing : pkgconf-m4-1.7.3-10.el9.noarch 2/9 Installing : libpkgconf-1.7.3-10.el9.x86_64 3/9 Installing : pkgconf-1.7.3-10.el9.x86_64 4/9 Installing : pkgconf-pkg-config-1.7.3-10.el9.x86_64 5/9 Installing : cyrus-sasl-devel-2.1.27-22.el9.x86_64 6/9 Installing : openldap-devel-2.6.8-4.el9.x86_64 7/9 Installing : libyaml-devel-0.2.5-7.el9.x86_64 8/9 Installing : apisix-3.17.0-0.ubi9.6.x86_64 9/9 Running scriptlet: apisix-3.17.0-0.ubi9.6.x86_64 9/9 Verifying : apisix-3.17.0-0.ubi9.6.x86_64 1/9 Verifying : libpkgconf-1.7.3-10.el9.x86_64 2/9 Verifying : pkgconf-1.7.3-10.el9.x86_64 3/9 Verifying : pkgconf-m4-1.7.3-10.el9.noarch 4/9 Verifying : pkgconf-pkg-config-1.7.3-10.el9.x86_64 5/9 Verifying : cyrus-sasl-2.1.27-22.el9.x86_64 6/9 Verifying : openldap-devel-2.6.8-4.el9.x86_64 7/9 Verifying : cyrus-sasl-devel-2.1.27-22.el9.x86_64 8/9 Verifying : libyaml-devel-0.2.5-7.el9.x86_64 9/9 Installed products updated. Installed: apisix-3.17.0-0.ubi9.6.x86_64 cyrus-sasl-2.1.27-22.el9.x86_64 cyrus-sasl-devel-2.1.27-22.el9.x86_64 libpkgconf-1.7.3-10.el9.x86_64 libyaml-devel-0.2.5-7.el9.x86_64 openldap-devel-2.6.8-4.el9.x86_64 pkgconf-1.7.3-10.el9.x86_64 pkgconf-m4-1.7.3-10.el9.noarch pkgconf-pkg-config-1.7.3-10.el9.x86_64 Complete! ``` ### Environment - APISIX version (run `apisix version`): 3.17.0 (or any version) - Operating system (run `uname -a`): `Linux 9b84a45de1de 6.6.119-0-virt #1-Alpine SMP PREEMPT_DYNAMIC 2025-12-10 08:04:08 x86_64 x86_64 x86_64 GNU/Linux` - OpenResty / Nginx version (run `openresty -V` or `nginx -V`): not relevant - etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`): not relevant - APISIX Dashboard version, if relevant: not relevant - Plugin runner version, for issues related to plugin runners: not relevant - LuaRocks version, for installation issues (run `luarocks --version`): not relevant -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
