Debian repository key absent/expired

[anve75]

Plan

Premium

Country

Italy

Device

Laptop

Operating System

Debian 12

My Question or Issue

When trying to update system, I get the following error:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://repository.spotify.com stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY C85668DF69375001
W: Failed to fetch http://repository.spotify.com/dists/stable/InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY C85668DF69375001

Trying to download key again as per Spotify download site doesn't work.

Any suggestions?

[ztealmax]

Spotify im having the same issue, please fix this soon

[ColdDev · Accepted solution]

Hi anve75

There is StackOverflow article about this, where the new key ID can be obtained.

https://unix.stackexchange.com/questions/788770/spotifys-repository-for-debian-has-outdated-keys

Another thread posted here states that this has been escalated to Spotify's internal team.

[tqpujgz]

# add new key
curl -sS https://download.spotify.com/debian/pubkey_C85668DF69375001.gpg | sudo tee /etc/apt/keyrings/spotify.asc

# fix /etc/apt/sources.list.d/spotify.list
echo 'deb [signed-by=/etc/apt/keyrings/spotify.asc] http://repository.spotify.com stable non-free' | sudo tee /etc/apt/sources.list.d/spotify.list

# remove old key
sudo rm /etc/apt/trusted.gpg.d/spotify.gpg

# update
sudo apt update

[herecam987]

I had followed these instructions (after trying some other things), and got stuck on a message :

Conflicting values set for option Signed-By regarding source http://repository.spotify.com/ stable: /etc/apt/keyrings/spotify.asc != -----BEGIN PGP PUBLICKEY BLOCK-----
... followed by a base64 stream ...

---

 For me the fix was that /etc/apt/sources.list.d contained old files called spotify.sources and spotify.sources.save alongside the spotify.list file overwritten by the second command in tpujqz's recipe.  Deleting the older files resolved the problem.