Fix for "the key has expired" warning when installing yubico-authenticator-bin
The package verifies the download using Dain Nilsson's GPG key. If your local copy of that key is outdated, GPG will report it as expired even though the key owner has renewed it on the keyserver.
To fix it, refresh the key:
curl https://keys.openpgp.org/vks/v1/by-fingerprint/20EE325B86A81BCBD3E56798F04367096FBA95E8 | gpg --import
Then rebuild/reinstall the package as usual. The warning will be gone.
Pinned Comments
aryklein commented on 2023-01-28 18:19 (UTC) (edited on 2025-05-29 00:30 (UTC) by aryklein)
NOTE: source code releases are typically signed with an OpenPGP key belonging to one of Yubico's developers, which may vary between releases. Ensure that you import the correct key for the latest release.
This message will be regularly updated to reflect the most recent key in use.
More information here: https://developers.yubico.com/Software_Projects/Software_Signing.html