Bug #120621 outdated GPG key is provided by mysql84-community-release-el10-3.noarch.rpm package
Submitted: 5 Jun 12:52
Reporter: T g Email Updates:
Status: Open Impact on me:
None 
Category:MySQL Package Repos Severity:S2 (Serious)
Version: OS:Red Hat (10)
Assigned to: CPU Architecture:Any

[5 Jun 12:52] T g
Description:
Hello,

Latest available yum repository for EL10 (mysql84-community-release-el10-3.noarch.rpm) is creating problems; It's not possible to install any package due to expired GPG key:

error: Verifying a signature using certificate BCA43417C3B485DD128EC6D4B7B3B788A8D3785C (MySQL Release Engineering <mysql-build@oss.oracle.com>):
  1. Certificate B7B3B788A8D3785C invalid: certificate is not alive
      because: The primary key is not live
      because: Expired on 2025-10-22T17:26:50Z
  2. Key B7B3B788A8D3785C invalid: key is not alive
      because: The primary key is not live
      because: Expired on 2025-10-22T17:26:50Z
MySQL Tools 9.7 LTS Community                                                                                       3.0 MB/s | 3.1 kB     00:00
GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql-2025 (0xA8D3785C) is already installed
The GPG keys listed for the "MySQL 9.7 LTS Community Server" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: mysql-community-client-9.7.0-1.el10.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql-2025
Public key for mysql-community-client-plugins-9.7.0-1.el10.x86_64.rpm is not trusted. Failing package is: mysql-community-client-plugins-9.7.0-1.el10.x86_64

how we can fix that? is there new GPG key available?

Regards,
Tomasz

How to repeat:
install yum repo for EL10:
https://dev.mysql.com/downloads/repo/yum/

try to install any mysql package:

dnf install mysql-server mysql-shell

in a result dnf will report this error:
MySQL Tools 9.7 LTS Community                                                                                       3.0 MB/s | 3.1 kB     00:00
GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql-2025 (0xA8D3785C) is already installed
The GPG keys listed for the "MySQL 9.7 LTS Community Server" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: mysql-community-client-9.7.0-1.el10.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql-2025
Public key for mysql-community-client-plugins-9.7.0-1.el10.x86_64.rpm is not trusted. Failing package is: mysql-community-client-plugins-9.7.0-1.el10.x86_64

tested on latest RHEL 10 and latest AlmaLinux 10

Suggested fix:
update "repo" package with new, valid gpg key