topic Re: Repository 'http://repository.spotify.com stable InRelease' is not signed in Desktop (Linux)

Repository 'http://repository.spotify.com stable InRelease' is not signed

flamas11 — Sun, 22 Jul 2018 03:34:26 GMT

Operating System

Debian testing

My Question or Issue

W: GPG error: http://repository.spotify.com stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY EFDC8610341D9410
E: The repository 'http://repository.spotify.com stable InRelease' is not signed.

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

Zocker1999NET — Sun, 22 Jul 2018 16:30:20 GMT

Same issue here.

The repository is signed with a key different from the key given at https://www.spotify.com/de/download/linux/

Key used to sign the repository: EFDC8610341D9410

Spotify, please confirm new key or sign the repository with the old key.

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

hemulin1 — Wed, 25 Jul 2018 20:53:39 GMT

Same here
(Lubuntu 16.04, spotify-client 1:1.0.80.480.g51b03ac3-13)

W: An error occurred during the signature verification.
The repository is not updated and the previous index files will be used. 
GPG error: http://repository.spotify.com stable InRelease: 
The following signatures were invalid: KEYEXPIRED 1532522191

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

IronWolve — Wed, 25 Jul 2018 21:33:52 GMT

Having the same issue on both stable and testing, pgp key is wrong.

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

jdferron — Wed, 25 Jul 2018 22:26:58 GMT

Also having the same issue. Please fix!

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

nmax — Thu, 26 Jul 2018 00:30:05 GMT

Same. I think this is a repeated error.

Ubuntu 18.04, sudo apt update:

"The following signatures couldn't be verified because the public key is not available: NO_PUBKEY EFDC8610341D9410"GPG error: http://repository.spotify.com stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY EFDC8610341D9410
W: Failed to fetch http://repository.spotify.com/dists/stable/InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY EFDC8610341D9410"

(No Subject)

flamas11 — Thu, 26 Jul 2018 00:43:41 GMT

As far as I can tell Spotify has been hacked and someone is messing up with the repository. It wouldn't surprise me if someone had embedded a cryptocurrency miner in the software. I'm loving how Spotify has been super fast to solve this, lol.

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

jsone — Thu, 26 Jul 2018 07:05:58 GMT

same problem here on ubuntu 16.04.

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

soundblaster16 — Thu, 26 Jul 2018 07:16:01 GMT

Since yesterday I got a similar/the same issue on Linux Mint 18.3 x64 when updating apt:

GPG error: http://repository.spotify.com stable InRelease

The reason phrase states "KEYEXPIRED"

Tried to update the key which didn't change anything:

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 931FF8E79F0876134EDDBDCCA87FF9DF48BF1C90

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

ffissore — Thu, 26 Jul 2018 07:57:45 GMT

Same here

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

jsone — Thu, 26 Jul 2018 13:03:40 GMT

in my case it's solved

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

flamas11 — Thu, 26 Jul 2018 19:07:16 GMT

Indeed, they fixed it. But they didn't even care to come here and tell us it was fixed. Thanks for the support, Spotify! All good, people.

Re: Repository 'http://repository.spotify.com stable InRelease' is not signed

elvis_d — Tue, 21 Aug 2018 09:48:20 GMT

To fix it, you follow step 1 for Debian at https://www.spotify.com/nl/download/linux/, that is

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 931FF8E79F0876134EDDBDCCA87FF9DF48BF1C90