Bug #119787 Expired GPG for RedHat repository
Submitted: 27 Jan 7:57 Modified: 27 Jan 14:23
Reporter: Jakub Pavčo Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Package Repos Severity:S2 (Serious)
Version:9.6.0 OS:Red Hat (10)
Assigned to: Balasubramanian Kandasamy CPU Architecture:Any

[27 Jan 7:57] Jakub Pavčo
Description:
Can't install mysql-connector-odbc package version 9.6.0 on RedHat 10. It's failed on GPG key expiration.

error: package mysql-connector-odbc-9.6.0-1.el10.x86_64 cannot be verified and repo mysql-connectors-community is GPG enabled: /var/cache/yum/metadata/mysql-connectors-community-10-x86_64/packages/mysql-connector-odbc-9.6.0-1.el10.x86_64.rpm could not be verified.
/var/cache/yum/metadata/mysql-connectors-community-10-x86_64/packages/mysql-connector-odbc-9.6.0-1.el10.x86_64.rpm: Verifying a signature using certificate BCA43417C3B485DD128EC6D4B7B3B788A8D3785C (MySQL Release Engineering <mysql-build@oss.oracle.com>):
  1. Certificate B7B3B788A8D3785C invalid: certificate is not alive
      because: The primary key is not live
      because: Expired on 2025-10-22T17:26:50Z
  2. Key B7B3B788A8D3785C invalid: key is not alive
      because: The primary key is not live
      because: Expired on 2025-10-22T17:26:50Z: Verifying a signature using certificate BCA43417C3B485DD128EC6D4B7B3B788A8D3785C (MySQL Release Engineering <mysql-build@oss.oracle.com>):
  1. Certificate B7B3B788A8D3785C invalid: certificate is not alive
      because: The primary key is not live
      because: Expired on 2025-10-22T17:26:50Z
  2. Key B7B3B788A8D3785C invalid: key is not alive
      because: The primary key is not live
      because: Expired on 2025-10-22T17:26:50Z:  digest:  SIGNATURE:  NOT OK

How to repeat:
Add the MySQL repository and try to install the package
(it is reproducible in docker image registry.access.redhat.com/ubi10:latest)

dnf install https://repo.mysql.com/mysql84-community-release-el10.rpm
dnf install mysql-connector-odbc

Suggested fix:
Provide a new valid GPG key to https://repo.mysql.com/ for signing packages from the repository and update https://repo.mysql.com/mysql84-community-release-el10.rpm with the new GPG key.
[27 Jan 9:44] Balasubramanian Kandasamy
Thanks for the bug report. We are working on it.
[27 Jan 9:50] Daniël van Eeden
Could be related to Bug #119212
[27 Jan 13:48] Balasubramanian Kandasamy
Please could you try install Connector ODBC RPM from the repository now.

$ md5sum mysql84-community-release-el10.rpm
4b06430c70e1d8530eeaa5377141205a  mysql84-community-release-el10.rpm

Repo setup mysql84-community-release-el10.rpm contains the /etc/pki/rpm-gpg/RPM-GPG-KEY-mysql-2025 file.
[27 Jan 14:23] Jakub Pavčo
It works. Thank you so much for quick help.