Skip to content

ShiftKey apt repo fails with certificate verification on Ubuntu Noble (24.04) #1265

Closed
Closed
ShiftKey apt repo fails with certificate verification on Ubuntu Noble (24.04)#1265

Description

@code-creeper
code-creeper
opened on Sep 4, 2025

Operating System/Distribution

PRETTY_NAME="Ubuntu 24.04.1 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
VERSION="24.04.1 LTS (Noble Numbat)"
VERSION_CODENAME=noble
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=noble
LOGO=ubuntu-logo

Installer

The release is latest 3.4.13 Linux RC1
The installer type is package repository

What happened?

When trying to update on Ubuntu 24.04 (Noble), the apt.packages.shiftkey.dev repo throws certificate verification errors and causes repeated warnings during apt update.

Logs

Err:6 https://apt.packages.shiftkey.dev/ubuntu any InRelease                                                                                                                                 
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2620:1ec:bdf::62 443]
W: Failed to fetch https://apt.packages.shiftkey.dev/ubuntu/dists/any/InRelease  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2620:1ec:bdf::62 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.

Steps to Reproduce

  1. Fresh Ubuntu 24.04 install
  2. Add https://apt.packages.shiftkey.dev/ubuntu any InRelease as a source
  3. Run sudo apt update

Expected

The repo should fetch successfully without TLS errors.

Actual

Fails with certificate verification errors (cert not trusted / CN mismatch).

Extra Notes

  • Other repos (Docker, Stripe, Redis, etc.) work fine, so this looks specific to the ShiftKey apt repo.
  • System date/time is correct.
  • Error happens consistently.

Activity

  1. github-actions
    added
    triage
    on Sep 4, 2025

  2. shitwolfymakes commented on Sep 5, 2025

    @shitwolfymakes
    shitwolfymakes
    on Sep 5, 2025

    Seems similar to #1062 et. al.

  3. ignis-sec commented on Sep 10, 2025

    @ignis-sec
    ignis-sec
    on Sep 10, 2025

    Running the install snippet will throw the following error:

    gpg: no valid OpenPGP data found.

    Connecting to the repository at https://apt.packages.shiftkey.dev/ubuntu shows that there is an HSTS error.

    Running the following curl command to ignore SSL errors shows that the repo page is likely gone because it shows a 404 error.

    $ curl -I -k https://apt.packages.shiftkey.dev/ubuntu
HTTP/2 404 
date: Wed, 10 Sep 2025 13:57:16 GMT
content-type: text/html
content-length: 266478
vary: Accept-Encoding
cache-control: no-store
x-azure-ref: 20250910T135716Z-r1c8879cf74lcjfwhC1ISTkt4400000016b0000000000bx0
x-cache: CONFIG_NOCACHE

    So it looks like @shiftkey's package feed is broken at the moment.

    @mwt's package feed mirror still works though, so in the meantime you can install via the following:

    Debian/Ubuntu

    wget -qO - https://mirror.mwt.me/shiftkey-desktop/gpgkey | gpg --dearmor | sudo tee /usr/share/keyrings/mwt-desktop.gpg > /dev/null
sudo sh -c 'echo "deb [arch=amd64 signed-by=/usr/share/keyrings/mwt-desktop.gpg] https://mirror.mwt.me/shiftkey-desktop/deb/ any main" > /etc/apt/sources.list.d/mwt-desktop.list'
sudo apt-get update && sudo apt-get install github-desktop

    Red Hat/CentOS/Fedora

    sudo rpm --import https://mirror.mwt.me/shiftkey-desktop/gpgkey
sudo sh -c 'echo -e "[mwt-packages]\nname=GitHub Desktop\nbaseurl=https://mirror.mwt.me/shiftkey-desktop/rpm\nenabled=1\ngpgcheck=1\nrepo_gpgcheck=1\ngpgkey=https://mirror.mwt.me/shiftkey-desktop/gpgkey" > /etc/yum.repos.d/mwt-packages.repo'

# if yum is your package manager
sudo yum install github-desktop

# if dnf is your package manager
sudo dnf install github-desktop

# if zypper is your package manager
sudo zypper ref && sudo zypper in github-desktop

    OpenSUSE

    sudo rpm --import https://mirror.mwt.me/shiftkey-desktop/gpgkey
sudo sh -c 'echo -e "[mwt-packages]\nname=GitHub Desktop\nbaseurl=https://mirror.mwt.me/shiftkey-desktop/rpm\nenabled=1\ngpgcheck=1\nrepo_gpgcheck=1\ngpgkey=https://mirror.mwt.me/shiftkey-desktop/gpgkey" > /etc/zypp/repos.d/mwt-packages.repo'

sudo zypper ref && sudo zypper in github-desktop

  4. code-creeper commented on Oct 17, 2025

    @code-creeper
    code-creeper
    on Oct 17, 2025
    Author

    Closing this issue since I found an alternative way to install the package.
    I downloaded the .deb release file directly from shiftkey/desktop releases

  5. code-creeper
    closed this as completedon Oct 17, 2025
  6. github-actions
    removed
    triage
    on Oct 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions