NEWS
nodesource-Repo - OpenPGP signature verification failed
-
Wer bei einem
sudo apt updateauf diese Meldung stößt:
W: https://deb.nodesource.com/node_22.x/dists/nodistro/InRelease: Policy will reject signature within a year, see --audit for details
oder (seit 01.02.2026):
Warning: An error occurred during the signature verification. The repository is not updated and the previous index files will be used.
OpenPGP signature verification failed: https://deb.nodesource.com/node_24.x nodistro InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6F7 1F525282841EEDAF851B42F59B5F99B1BE0B4 is not bound: No binding signature at time 2026-01-19T15:30:12Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Warning: Failed to fetch https://deb.nodesource.com/node_24.x/dists/nodistro/InRelease Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6F71F525282841EEDAF851B42F59B5F99B1BE0B4 is not bound: No binding signature at time 2026-01-19T15:30:12Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Warning: Some index files failed to download. They have been ignored, or old ones used instead.kann nun die alte Signatur ersetzen lassen. Dazu einfach per
iob nodejs-update 22die letzte Version aus dem (derzeitig aktuellen) 22er-Zweig noch mal drüber installieren. Es kommt dann diese Rückfrage:
Nothing to do - Your installation is using the correct paths.
You are missinng the nodesource.list or
you want to change your current nodejs version: v22.22.0 ?Press <y> to continue or any other key to quit
Das dann einfach per 'y' bestätigen und die o.g. Meldung sollte beim nächsten Update nicht mehr angezeigt werden.
Wichtig ist die Angabe der Hauptversion '22' im nodejs-update Befehl.