https://bugzilla.novell.com/show_bug.cgi?id=392064 JP Rosevear changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |shaas@novell.com AssignedTo|bnc-team-gnome@forge.provo.novell.com |sreeves@novell.com Severity|Normal |Critical Status Whiteboard| |gnome-showstopper packagekit_devel -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=392064 User coolo@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=392064#c3 Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |vuntz@novell.com --- Comment #3 from Stephan Kulow 2008-05-21 03:41:28 MST --- no log files? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=392064 User shaas@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=392064#c5 Stefan Haas changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |vuntz@novell.com --- Comment #5 from Stefan Haas 2008-05-21 04:38:51 MST --- please attach /var/log/pk_backend_zypp -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=392064 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|vuntz@novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=392064 User vuntz@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=392064#c8 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|vuntz@novell.com | --- Comment #8 from Vincent Untz 2008-05-21 06:56:21 MST --- vuntz@lyon ~/>rpm -qa *packagekit* *Package* gnome-packagekit-0.2.1-2 PackageKit-0.2.1-2 Don't remember seeing one such notification today, though. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=392064 User sreeves@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=392064#c9 --- Comment #9 from Scott Reeves 2008-05-22 22:30:44 MST --- There are 2 problems. 1. We (zypp backend) need to produce a better message when the repo has a gpg key that has not been accepted. Instead of "Repo signature verification failed" we need to say something like "Repository xxx is signed with an unknown key". 2. We (gnome-packagekit gui) need to offer a chance to accept the key similar to what you would get if you were to immediately run gpk-update-viewer. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=392064 User visnov@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=392064#c11 Stanislav Visnovsky changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@novell.com --- Comment #11 from Stanislav Visnovsky 2008-05-23 03:22:30 MST ---

I bet that 99% of the users don't know what signing means, and won't understand anything. And if they understand, what will they do? Click accept anyway. Can't we automatically accept they key?

No. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=392064 User dmacvicar@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=392064#c13 Duncan Mac-Vicar changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dmacvicar@novell.com --- Comment #13 from Duncan Mac-Vicar 2008-05-23 07:47:16 MST --- 1. We (zypp backend) need to produce a better message when the repo has a gpg key that has not been accepted. Instead of "Repo signature verification failed" we need to say something like "Repository xxx is signed with an unknown key". NOOOOO! Those are 2 different situations, the second one means the repo is signed with a unknown key, but the verification is ok, while the first means the file is signed and some evil person corrupted it! So if you get "Repo signature verification failed" is not a normal situation and the user has to be aware of it. If you want to change the message do it to "the repository was modified in a evil way" or something, but don't lie to the user about the situation. I would say close as INVALID. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=392064 User jpr@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=392064#c15 JP Rosevear changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |shaas@novell.com --- Comment #15 from JP Rosevear 2008-05-23 09:15:02 MST --- (In reply to comment #14 from Stefan Haas)

(In reply to comment #13 from Duncan Mac-Vicar)

...

1. We (zypp backend) need to produce a better message when the repo has a gpg key that has not been accepted. Instead of "Repo signature verification failed" we need to say something like "Repository xxx is signed with an unknown key".

NOOOOO!

I've changed the error message to: "Signature verification for Repository xxx failed" (should be a good compromise)

Doesn't this break translations though? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=392064 User sreeves@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=392064#c16 Scott Reeves changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |RESOLVED Info Provider|shaas@novell.com | Resolution| |FIXED --- Comment #16 from Scott Reeves 2008-05-27 17:29:32 MDT --- This code path (background update) now follows the same code path that the explicit user requested path does. If a repo has a key that has not been accepted the user is presented with a dialog containing the relevant information (repo name, url, key, signing user) and asked to accept the key. Comment #14 is a string change but unfortunately the original string was never marked for translation, so no regression. With the new flow you will now only see that string if you decline acceptance of the key. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.