https://bugzilla.novell.com/show_bug.cgi?id=713013 https://bugzilla.novell.com/show_bug.cgi?id=713013#c zj jia changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zjjia@suse.com AssignedTo|bnc-team-screening@forge.pr |mls@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=713013 https://bugzilla.novell.com/show_bug.cgi?id=713013#c3 Michael Schröder changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED InfoProvider|pascal.bleser@opensuse.org | --- Comment #3 from Michael Schröder 2011-09-15 13:39:03 UTC --- Ah wait, I can't reproduce it with Factory packages, but I can reproduce it with packages built *for* Factory. (There's a difference in the sign algo, factory uses RSA). So, bug in sign. Will fix ASAP. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=713013 https://bugzilla.novell.com/show_bug.cgi?id=713013#c5 --- Comment #5 from Pascal Bleser 2011-09-19 05:22:12 UTC --- Thanks, but could you please outline what the fix is? :) We are re-signing RPMs using our own scripts, after they have been signed with signd. Just wondering whether we need to change something too or whether the change in signd will be enough. Basically: 1. build on the Packman OBS instance 2. sign on the Packman OBS instance 3. transfer to mirror host into a staging area 4. re-sign the packages with a new key 5. move to public area for mirroring Step 4 is really just plain old rpm, with --checksig, --delsign and --addsign -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=713013 https://bugzilla.novell.com/show_bug.cgi?id=713013#c7 --- Comment #7 from Pascal Bleser 2011-09-22 17:43:44 UTC --- Awesome, thanks Michael. I completely missed to see that as a potential reason for the issue: even though I actually had a deep look at the signer code a while ago, it didn't cross my mind that the signer re-implements the procedure from scratch without using librpm. Thanks for the fix, I'll try to get ahold of the git HEAD version of it to use that until there is a new release. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.