Can't update on Fedora due to revoked subkey?

I can't update LibreWolf on Fedora because the signing key seems to be revoked.

I get this when I run sudo dnf upgrade librewolf:

--------------------------------------------------------------------------------
[2/2] Total                             100% |   0.0   B/s |   0.0   B |  00m00s
Transaction failed: Signature verification failed.
Public key "https://repo.librewolf.net/pubkey.gpg" is already present, not importing.
OpenPGP check for package "librewolf-150.0.3-1.x86_64" (/var/cache/libdnf5/librewolf-d3659b612308432a/packages/librewolf-150.0.3-1-linux-x86_64-rpm.rpm) from repo "librewolf" has failed: Public key is not installed.

Then I tried importing the key manually from https://repo.librewolf.net/pubkey.gpg:

$ sudo rpmkeys --import pubkey.gpg 
warning: Certificate 40339DD82B12EF16:
  Subkey 8A74EAAF89C17944 was revoked: No reason specified

I could disable the signature check, but I'm worried now.

gpg --show-keys pubkey.gpg shows this:

pub   rsa4096 2022-05-14 [SC]
      662E3CDD6FE329002D0CA5BB40339DD82B12EF16
uid                      LibreWolf Maintainers <gpg@librewolf.net>
sub   ed25519 2026-04-25 [S]
sub   ed25519 2026-04-25 [S]
sub   rsa4096 2022-05-14 [S]
sub   rsa4096 2022-05-14 [E]
sub   rsa4096 2022-05-14 [S] [revoked: 2026-04-25]

I think I did some updates since April 25th. I don't understand why it doesn't work now.

8 points · 6 comments · view on lemmy.world

6 Comments

ioioioioioioio@lemmy.ml · 5 pts · 134d (1 reply)
plasma_stimulant@lemmy.ml · 2 pts · 132d

Thank you!

HelloRoot@lemy.lol · 3 pts · 134d (3 replies)

Same on archlinux, importing the new key fixed it and I was able to update

plasma_stimulant@lemmy.ml · 3 pts · 134d (2 replies)

Where's the new key? How did you import it, can you share? I only know of https://repo.librewolf.net/pubkey.gpg and it has a revoked subkey

HelloRoot@lemy.lol · 3 pts · 133d (1 reply)

gpg --fetch-keys https://rpm.librewolf.net/pubkey.gpg

source with other discussion/suggestions: https://aur.archlinux.org/packages/librewolf-bin

plasma_stimulant@lemmy.ml · 3 pts · 132d

Thank you, I'll keep that in mind. For some reason sudo dnf upgrade worked after a few hours, I didn't have to do anything.