尝试在 Kali 上进行 apt-get 更新时签名无效

Question

当我尝试执行apt-get update以下操作时出现无效签名错误：

Ign:1 http://dl.google.com/linux/chrome/deb stable InRelease

Hit:2 http://dl.google.com/linux/chrome/deb stable Release 

Hit:4 https://download.sublimetext.com apt/dev/ InRelease                      

Hit:5 http://deb.i2p2.no unstable InRelease                         

Get:6 http://ftp.yzu.edu.tw/Linux/kali kali-rolling InRelease [30.5 kB]

Err:6 http://ftp.yzu.edu.tw/Linux/kali kali-rolling InRelease
  The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <devel@kali.org>
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.yzu.edu.tw/Linux/kali kali-rolling InRelease: The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <devel@kali.org>
W: Failed to fetch http://http.kali.org/kali/dists/kali-rolling/InRelease  The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <devel@kali.org>
W: Some index files failed to download. They have been ignored, or old ones used instead.

为什么会这样？我该如何解决？

Answer 1

Per：https : //twitter.com/kalilinux/status/959515084157538304，您的存档密钥环包已过时。您需要这样做（以 root 身份）：

wget -q -O - https://archive.kali.org/archive-key.asc  | apt-key add

Answer 2

尝试这个：

wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
apt install ./kali-archive-keyring_2018.1_all.deb
apt-get update

Kali 论坛有这个线程，如果这不起作用，您可以进一步查找。

Answer 3

您缺少 Kali 用于签署其包的密钥。您可以使用gpg下载密钥并apt-key add添加它：

gpg --keyserver pgpkeys.mit.edu --recv-key  ED444FF07D8D0BF6
gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -