Skip to content

Outdated ZAP in Linux distros #9320

Description

@aoand

Describe the bug:

The Ubuntu repository key expired on 20-Apr-2026, so APT refuses to install of update the package.

Steps to reproduce the behavior:

  1. Go to https://software.opensuse.org/download.html?project=home%3Acabelo&package=zap
  2. Follow instruction for Ubuntu 22.04:
echo 'deb http://download.opensuse.org/repositories/home:/cabelo/xUbuntu_22.04/ /' | sudo tee /etc/apt/sources.list.d/home:cabelo.list
curl -fsSL https://download.opensuse.org/repositories/home:cabelo/xUbuntu_22.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_cabelo.gpg > /dev/null
sudo apt update
  1. Get the error:
The following signatures were invalid: EXPKEYSIG 18B6CC30405F642D home:cabelo OBS Project <home:cabelo@build.opensuse.org>
  1. Check the key directly:
curl -fsSL https://download.opensuse.org/repositories/home:cabelo/xUbuntu_22.04/Release.key | gpg
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2021-08-23 [SC] [expired: 2026-04-20]
      1553C74FC763CE08361E8F0918B6CC30405F642D
uid           home:cabelo OBS Project <home:cabelo@build.opensuse.org>

Expected behavior:

The key should be valid

Software Versions:

OS: Ubuntu 22.04
ZAP: 2.16.1-1

Screenshots:

No response

Errors from the zap.log file:

No response

Additional context:

No response

Would you like to help fix this issue?

  • Yes

Activity

  1. changed the title [-]Ubuntu 22.04 installation error: repository key expired[/-] [+]xUbuntu 22.04 installation error: repository key expired[/+] on Apr 30, 2026
  2. kingthorin commented on Apr 30, 2026

    @kingthorin
    Member

    I've reached out to the maintainer to find out what's up with the xUbuntu package.

    If you're actually on Ubuntu then check: https://snapcraft.io/install/zaproxy/ubuntu

  3. aoand commented on Apr 30, 2026

    @aoand
    Author

    Thanks!
    I will consider switching to snap, though generally I do not like snap.

  4. cabelo commented on May 1, 2026

    @cabelo

    I'm working on all these issues; the key is up to date.

    Sorry for the inconvenience.

  5. kingthorin commented on May 4, 2026

    @kingthorin
    Member

    @aoand I believe things should be updated by now. Can you try again and let us know if you're successful?

  6. changed the title [-]xUbuntu 22.04 installation error: repository key expired[/-] [+]Outdated ZAP in Linux distros[/+] on May 4, 2026
  7. thc202 commented on May 4, 2026

    @thc202
    Member

    fyi, there's another report of ZAP being outdated in RHEL #9326.

  8. aoand commented on May 4, 2026

    @aoand
    Author

    @kingthorin : I am still getting the expired key for xUbuntu:

    curl -fsSL https://download.opensuse.org/repositories/home:cabelo/xUbuntu_22.04/Release.key | gpg
    gpg: WARNING: no command supplied.  Trying to guess what you mean ...
    pub   rsa2048 2021-08-23 [SC] [expired: 2026-04-20]
          1553C74FC763CE08361E8F0918B6CC30405F642D
    uid           home:cabelo OBS Project <home:cabelo@build.opensuse.org>
    

    Interesting, the key for Debian-12 is updated:

    curl -fsSL https://download.opensuse.org/repositories/home:cabelo/Debian_12/Release.key | gpg
    gpg: WARNING: no command supplied.  Trying to guess what you mean ...
    pub   rsa2048 2021-08-23 [SC] [expires: 2028-07-09]
          1553C74FC763CE08361E8F0918B6CC30405F642D
    uid           home:cabelo OBS Project <home:cabelo@build.opensuse.org>
    
  9. kingthorin commented on May 4, 2026

    @kingthorin
    Member

    @cabelo seems some are still outstanding?

  10. cabelo commented on May 5, 2026

    @cabelo

    @kingthorin The openSUSE servers are having synchronization issues; I'm opening a support ticket. I've already resolved all other pending issues.

  11. kingthorin commented on May 5, 2026

    @kingthorin
    Member

    Thank you!!

  12. kingthorin commented on May 28, 2026

    @kingthorin
    Member

    @aoand can you give things a shot again?

  13. aoand commented on May 28, 2026

    @aoand
    Author

    @kingthorin strange enough, xUbuntu keys are still not updated:

    $ curl -fsSL https://download.opensuse.org/repositories/home:cabelo/xUbuntu_22.04/Release.key | gpg
    gpg: WARNING: no command supplied.  Trying to guess what you mean ...
    pub   rsa2048 2021-08-23 [SC] [expired: 2026-04-20]
          1553C74FC763CE08361E8F0918B6CC30405F642D
    uid           home:cabelo OBS Project <home:cabelo@build.opensuse.org>
    

    The same problem is with xUbuntu_18.04 and 20.04.

    However, Debian keys for version 10, 11, and 12 are all updated:

    $ curl -fsSL https://download.opensuse.org/repositories/home:cabelo/Debian_12/Release.key | gpg
    gpg: WARNING: no command supplied.  Trying to guess what you mean ...
    pub   rsa2048 2021-08-23 [SC] [expires: 2028-07-09]
          1553C74FC763CE08361E8F0918B6CC30405F642D
    uid           home:cabelo OBS Project <home:cabelo@build.opensuse.org>
    

    Given the fact, that the keys are the same, only signature on the keyrings differ, I installed the Debian key in my Ubuntu.
    But this is not right. ;)

  14. kingthorin commented on May 28, 2026

    @kingthorin
    Member

    @cabelo any insight/advice?

  15. cabelo commented on Jun 17, 2026

    @cabelo

    @kingthorin There are several other repositories with problems; I am intensely seeking solutions with SUSE and openSUSE. I was absent because I had personal issues.

  16. kingthorin commented on Jun 17, 2026

    @kingthorin
    Member

    No problem, real life happens. Thanks for following up!

  17. cabelo commented on Sep 27, 2026

    @cabelo

    @kingthorin

    To ensure the zaproxy community does not think this is due to a lack of responsibility or effort on my part, I present below evidence regarding the two issues opened five months ago.

    openSUSE/MirrorCache#653
    openSUSE/MirrorCache#663

  18. kingthorin commented on Sep 27, 2026

    @kingthorin
    Member

    Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions