Ubuntu linux repository failure

I have the following error when using `apt update` in Debian sid.

W: GPG error: http://linux.dropbox.com/debian sid Release: The following signatures were invalid: BADSIG FC918B335044912E Dropbox Automatic Signing Key <linux@dropbox.com>
E: The repository 'http://linux.dropbox.com/debian sid Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Hey czchen, sorry for the delay here.

Would you mind confirming that your device meets the minimum requirements for the Dropbox app and is running on a supported environment?

The machine fulfill the minimal requirements:

Linux version: Debian trixie/sid

Dropbox app version: 2023.09.06

file system: ext4

Hi czchen, currently the Linux requirements for the app are Ubuntu or Fedora, not Debian, so the support we can provide is limited for your system.

Have you tried contacting the support team directly in relation to this matter?

---

czchen wrote:

I have the following error when using `apt update` in Debian sid.

W: GPG error: http://linux.dropbox.com/debian sid Release: The following signatures were invalid: BADSIG FC918B335044912E Dropbox Automatic Signing Key <linux@dropbox.com>
E: The repository 'http://linux.dropbox.com/debian sid Release' is not signed.
...

---

Hi czchen,

I just checked and the previous issue (incorrect signing) seems solved (the signature of Debian sid Release.gpg matches Release file). Are you certain you have registered the signing key? 🤔 If you haven't registered correct key, you won't be able check such signature (like trying to unlock a door with unmached key). 🙋

Another way is to just install the package by hand and it will install the key for you. Download the suitable deb package and install it using whatever installer is convenient for you (dpkg, apt, etc.) or just click on the package the environment will direct you to suitable installed graphical wrapper of installer. 😉 About which one is suitable: If your environment is pre-Gtk4 based, then you have to download version 2020.03.04 of the package (i.e. dropbox_2020.03.04_amd64.deb) - latest are incompatible (don't ask me why 🤦 - one of the stupid moves of Dropbox development). For Gtk4 based environments - download the latest package version (by now - moment of this post - 2023.09.06 - i.e. dropbox_2023.09.06_amd64.deb). For other options take a look here: https://linux.dropbox.com/packages/debian/ ...

Hope this helps.

---

 Jay wrote:
Hi @czchen, currently the Linux requirements for the app are Ubuntu or Fedora, not Debian ...

---

Not Debian...🤔 And what are looking for Debian directed forks of the package on your site, as shown in previous paragraph, in such a case? 🧐😀🤫

I was happy to see that Debian packages were added to the Dropbox app downloads, but I am also getting the GPG error, this is right after I installed the new Debian package (dropbox_2023.09.06_amd64.deb).

The message form apt is 

W: GPG error: http://linux.dropbox.com/debian bookworm Release: The following signatures were invalid: BADSIG FC918B335044912E Dropbox Automatic Signing Key <linux@dropbox.com>
E: The repository 'http://linux.dropbox.com/debian bookworm Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

The sources.list entry is in /etc/apt/sources.list.d/dropbox.list and reads

deb [arch=i386,amd64 signed-by=/etc/apt/keyrings/dropbox.asc] http://linux.dropbox.com/debian bookworm main

Any help will be very apreciated

Hm...🤔 I just checked the repository sign validity and seems fine:

There was issue some time ago, but it's solved already and as seems it still works. Make sure your certificate looks like:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQENBEt0ibEBCACv4hZRPqwtpU6z8+BB5YZU1a3yjEvg2W68+a6hEwxtCa2U++4d
zQ+7EqaUq5ybQnwtbDdpFpsOi9x31J+PCpufPUfIG694/0rlEpmzl2GWzY8NqfdB
FGGm/SPSSwvKbeNcFMRLu5neo7W9kwvfMbGjHmvUbzBUVpCVKD0OEEf1q/Ii0Qce
kx9CMoLvWq7ZwNHEbNnij7ecnvwNlE2MxNsOSJj+hwZGK+tM19kuYGSKw4b5mR8I
yThlgiSLIfpSBh1n2KX+TDdk9GR+57TYvlRu6nTPu98P05IlrrCP+KF0hYZYOaMv
Qs9Rmc09tc/eoQlN0kkaBWw9Rv/dvLVc0aUXABEBAAG0MURyb3Bib3ggQXV0b21h
dGljIFNpZ25pbmcgS2V5IDxsaW51eEBkcm9wYm94LmNvbT6JATYEEwECACAFAkt0
ibECGwMGCwkIBwMCBBUCCAMEFgIDAQIeAQIXgAAKCRD8kYszUESRLi/zB/wMscEa
15rS+0mIpsORknD7kawKwyda+LHdtZc0hD/73QGFINR2P23UTol/R4nyAFEuYNsF
0C4IAD6y4pL49eZ72IktPrr4H27Q9eXhNZfJhD7BvQMBx75L0F5gSQwuC7GdYNlw
SlCD0AAhQbi70VBwzeIgITBkMQcJIhLvllYo/AKD7Gv9huy4RLaIoSeofp+2Q0zU
HNPl/7zymOqu+5Oxe1ltuJT/kd/8hU+N5WNxJTSaOK0sF1/wWFM6rWd6XQUP03Vy
NosAevX5tBo++iD1WY2/lFVUJkvAvge2WFk3c6tAwZT/tKxspFy4M/tNbDKeyvr6
85XKJw9ei6GcOGHD
=5rWG
-----END PGP PUBLIC KEY BLOCK-----

 ... and also place it in /etc/apt/trusted.gpg.d/dropbox.asc

After that, check what's going on. If still some issues, try change the content of dropbox.list file to:

deb https://linux.dropbox.com/ubuntu disco main

Debian and Ubuntu repositories are mirrors to each other on Dropbox servers.

Good luck.

Thank you so much!

I can confirm that doing what you did fixes the problem.

Have no idea why!

Thank you so much for your help