EXPKEYSIG debian ubuntu

Fix EXPKEYSIG 78BD65473CB3BD13

Google Chrome <linux-packages-keymaster@google.com> — by Google

Error message
EXPKEYSIG 78BD65473CB3BD13 Google Chrome <linux-packages-keymaster@google.com>

Fix commands for RHEL / CentOS / AlmaLinux

Method 1 Import from official URL

Directly imports the GPG key from the vendor URL into the RPM database.

RHEL / CentOS / AlmaLinux — bash
$ sudo rpm --import https://dl.google.com/linux/linux_signing_key.pub
$ sudo yum check-update || sudo dnf check-update

Method 2 Import via GnuPG then rpm

Compatible with RHEL, CentOS, AlmaLinux and Rocky Linux (both yum and dnf).

RHEL / CentOS / AlmaLinux — bash
$ gpg --keyserver hkps://keys.openpgp.org --recv-keys 78BD65473CB3BD13
$ gpg --export --armor 78BD65473CB3BD13 | sudo rpm --import -
$ sudo yum check-update || sudo dnf check-update

Additional notes

Google rotates its Linux repo signing key periodically. If this fix stops working, check the official page for the current key fingerprint.

After importing the key

Run sudo apt-get update (or your distro's equivalent) again. If successful you should see Hit: lines with no EXPKEYSIG warnings. Still broken? Check that your /etc/apt/sources.list.d/ entry references the correct [signed-by=…] keyring path.