Issue with GPG signature verification for Temboard on Debian 13

[christopheroux]

Hello,

I am trying to install Temboard on a Debian 13 VM. When running sudo apt update, I encounter a signature verification error:

Atteint : 4 https://apt.postgresql.org/pub/repos/apt trixie-pgdg InRelease

Err : 3 http://apt.dalibo.org/labs trixie-dalibo InRelease

Sub-process /usr/bin/sqv returned an error code (1), error message is:
Verifying signature: Malformed MPI: leading bit is not set: expected bit 8 to be set in 101011 (2b)

Warning: OpenPGP signature verification failed: http://apt.dalibo.org/labs trixie-dalibo InRelease: Sub-process /usr/bin/sqv returned an error code (1) [...]

Error: The repository http://apt.dalibo.org/labs trixie-dalibo InRelease is not signed.

Here is the content of my /etc/apt/sources.list.d/dalibo-labs.list file:

deb [signed-by=/etc/apt/keyrings/dalibo-labs.gpg] http://apt.dalibo.org/labs trixie-dalibo main

I obtained the GPG key using the following command:

curl -fsSL -o /etc/apt/keyrings/dalibo-labs.gpg https://apt.dalibo.org/labs/debian-dalibo.gpg

Thank you in advance for your help.

Best regards,

Christophe

[christopheroux]

Hello,
Your apt.dalibo.org/labs repository is currently unusable on Debian 13 "Trixie" due to a GPG key that does not comply with the OpenPGP RFC 4880 standard.
Error returned by APT:
Malformed MPI: leading bit is not set: expected bit 8 to be set in 101011 (2b)

Root cause: Debian 13 replaced gpg with sqv as the signature verification tool in APT. sqv strictly enforces the MPI format — one integer in your key starts with a leading zero bit, which gpg used to silently accept but sqv rejects.

My question: was the labs repository tested on Debian 13 Trixie prior to its release? If so, which version of APT was used?

Please keep me informed of any progress on this matter.
Kind regards

[pirlgon]

Hello,

Our team is working on this issue.
As a workaround, you can use GPGV with the following command:
echo 'APT::Key::GPGV::Command "/usr/bin/gpgv";' | tee /etc/apt/apt.conf.d/999force-gpgv

Please ensure that you have previously installed the GPGV binary.

Kind regards.