EXPKEYSIG debian ubuntu

Fix EXPKEYSIG 78BD65473CB3BD13

Google Chrome <linux-packages-keymaster@google.com> — by Google

Error message
EXPKEYSIG 78BD65473CB3BD13 Google Chrome <linux-packages-keymaster@google.com>

Fix commands for Arch Linux

Method 1 Refresh key via pacman-key

Refreshes all keys in the pacman keyring from keyservers. Slowest but most thorough.

Arch Linux — bash
$ sudo pacman-key --refresh-keys

Method 2 Receive specific key

Fetches the specific expired key and locally signs it to mark it as trusted.

Arch Linux — bash
$ sudo pacman-key --keyserver keyserver.ubuntu.com --recv-keys 78BD65473CB3BD13
$ sudo pacman-key --lsign-key 78BD65473CB3BD13

Method 3 Reinitialize keyring (nuclear option)

Reinitializes the entire pacman keyring. Use only if other methods fail.

Arch Linux — bash
$ sudo pacman-key --init
$ sudo pacman-key --populate archlinux

Additional notes

Google rotates its Linux repo signing key periodically. If this fix stops working, check the official page for the current key fingerprint.

After importing the key

Run sudo apt-get update (or your distro's equivalent) again. If successful you should see Hit: lines with no EXPKEYSIG warnings. Still broken? Check that your /etc/apt/sources.list.d/ entry references the correct [signed-by=…] keyring path.