[opensuse-factory] Gpg key expiring

older
[opensuse-factory] New Tumbleweed...

ianseeks

16 Jul 2016 16 Jul '16

08:38

Hi Just got this message (see below) during a "zypper dup" - not sure if its significant but I just thought i'd post it as a reminder. Regards Ian Retrieving repository 'Printing' metadata ------------------------------------------------------------------------------------------------------------------------------------------- [\] The gpg key signing file 'repomd.xml' will expire in 14 days. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624 -- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.1 Kernel: 4.6.3-1-default "openSUSE Tumbleweed (20160714) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Show replies by date

Johannes Meixner

19 Jul 19 Jul

09:01

Hello, On Jul 16 09:38 ianseeks wrote (excerpt):

...

Retrieving repository 'Printing' metadata The gpg key signing file 'repomd.xml' will expire in 14 days. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

I have no idea how to fix that. Yesterday I did what I was told to do last time (and what seems to have helped last time): --------------------------------------------------------------- $ osc signkey --extend Printing <status code="ok" /> $ --------------------------------------------------------------- But that seems to no longer make it work because I tried afterwards yesterday and also today and I still get (on my Leap 42.1 system): ----------------------------------------------------------------------- # zypper -v ar -cg \ http://download.opensuse.org/repositories/Printing/openSUSE_Leap_42.1/Printi... Verbosity: 1 Non-option programme arguments: 'http://download.opensuse.org/repositories/Printing/openSUSE_Leap_42.1/Printi...' Retrieving: Printing.repo ................................[done] Adding repository 'Printing System Development Project (openSUSE_Leap_42.1)' ....................................[done] Repository 'Printing System Development Project (openSUSE_Leap_42.1)' successfully added Enabled : Yes Autorefresh : No GPG Check : Yes Priority : 99 URI : http://download.opensuse.org/repositories/Printing/openSUSE_Leap_42.1/ # zypper -v refresh 1 Verbosity: 1 Non-option programme arguments: '1' Initialising Target Specified repositories: Printing Checking whether to refresh metadata for Printing System Development Project (openSUSE_Leap_42.1) Retrieving: repomd.xml.asc .........................[done] Retrieving: repomd.xml.key .........................[done] Retrieving: repomd.xml .............................[done] New repository or package signing key received: Repository: Printing System Development Project (openSUSE_Leap_42.1) Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Thu 22 May 2014 14:07:15 CEST Key Expires: Sat 30 Jul 2016 14:07:15 CEST (expires in 11 days) Rpm Name: gpg-pubkey-98c4529d-537de873 ------------------------------------------------------------------------ I notice same Key Fingerprint but different Key Created times and different Rpm Name but I am not at all an expert in those stuff (neither in GPG nor in the OBS way how it handles keys). Kind Regards Johannes Meixner -- SUSE LINUX GmbH - GF: Felix Imendoerffer, Jane Smithard, Graham Norton - HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Dominique Leuenberger / DimStar

09:33

On Tue, 2016-07-19 at 11:01 +0200, Johannes Meixner wrote:

...

Yesterday I did what I was told to do last time (and what seems to have helped last time): --------------------------------------------------------------- $ osc signkey --extend Printing <status code="ok" /> $ ---------------------------------------------------------------

This is indeed the right thing to do... you can also check if the new key has indeed been created by: osc signkey Printing | gpg pub dsa1024 2008-01-22 [SC] [expires: 2018-09-26] 7C8A8DA1722FC4DFDA9FF1EF669DEC9F98C4529D uid Printing OBS Project => the expiration date has indeed been corrected

...

But that seems to no longer make it work because I tried afterwards yesterday and also today and I still get (on my Leap 42.1 system):

Has the repo been published since you extended the key? At least one package needs to be published to make the repo re-appear; that's when the new key is being published. Might be worthy though to file an issue on https://github.com/openSUSE/ open-build-service/issues to ask for a publisher run when the key is changed Cheers, Dominique

Johannes Meixner

15:13

Hello Dominique, On Jul 19 11:33 Dominique Leuenberger / DimStar wrote (excerpt):

...

On Tue, 2016-07-19 at 11:01 +0200, Johannes Meixner wrote:

...
Yesterday I did what I was told to do last time (and what seems to have helped last time): --------------------------------------------------------------- $ osc signkey --extend Printing <status code="ok" /> $ ---------------------------------------------------------------

This is indeed the right thing to do... you can also check if the new key has indeed been created by:

osc signkey Printing | gpg pub dsa1024 2008-01-22 [SC] [expires: 2018-09-26] 7C8A8DA1722FC4DFDA9FF1EF669DEC9F98C4529D uid Printing OBS Project

=> the expiration date has indeed been corrected

...
But that seems to no longer make it work because I tried afterwards yesterday and also today and I still get (on my Leap 42.1 system):

Has the repo been published since you extended the key? At least one package needs to be published to make the repo re-appear; that's when the new key is being published.

Many thanks for your helpful information. I did a small fix for Printing/epson-inkjet-printer-escpr and waited until "osc results" no longer shows "unpublished" and now it works for me on my openSUSE Leap 42.1 system: ---------------------------------------------------------------- # zypper -v ar -cg \ http://download.opensuse.org/repositories/Printing/openSUSE_Leap_42.1/Printi... ... # zypper -v refresh 1 ... New repository or package signing key received: Repository: Printing System Development Project (openSUSE_Leap_42.1) Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Mon 18 Jul 2016 10:23:32 CEST Key Expires: Wed 26 Sep 2018 10:23:32 CEST Rpm Name: gpg-pubkey-98c4529d-578c9204 ----------------------------------------------------------------

...

Might be worthy though to file an issue on https://github.com/openSUSE/open-build-service/issues to ask for a publisher run when the key is changed

https://github.com/openSUSE/open-build-service/issues/1949 Kind Regards Johannes Meixner -- SUSE LINUX GmbH - GF: Felix Imendoerffer, Jane Smithard, Graham Norton - HRB 21284 (AG Nuernberg)

ianseeks

09:39

On Tuesday, 19 July 2016 11:01:54 BST Johannes Meixner wrote:

...

Hello,

On Jul 16 09:38 ianseeks wrote (excerpt):

...
Retrieving repository 'Printing' metadata The gpg key signing file 'repomd.xml' will expire in 14 days.

Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

I have no idea how to fix that.

Yesterday I did what I was told to do last time (and what seems to have helped last time): --------------------------------------------------------------- $ osc signkey --extend Printing <status code="ok" /> $ ---------------------------------------------------------------

I don't have "osc" on my system. If i try to install it, it wants to bring in loads of dependencies - do i really want to do this?

...

But that seems to no longer make it work because I tried afterwards yesterday and also today and I still get (on my Leap 42.1 system): ----------------------------------------------------------------------- # zypper -v ar -cg \ http://download.opensuse.org/repositories/Printing/openSUSE_Leap_42.1/Printi ng.repo

Verbosity: 1 Non-option programme arguments: 'http://download.opensuse.org/repositories/Printing/openSUSE_Leap_42.1/Print ing.repo' Retrieving: Printing.repo ................................[done] Adding repository 'Printing System Development Project (openSUSE_Leap_42.1)' ....................................[done] Repository 'Printing System Development Project (openSUSE_Leap_42.1)' successfully added Enabled : Yes Autorefresh : No GPG Check : Yes Priority : 99 URI : http://download.opensuse.org/repositories/Printing/openSUSE_Leap_42.1/

# zypper -v refresh 1 Verbosity: 1 Non-option programme arguments: '1' Initialising Target Specified repositories: Printing Checking whether to refresh metadata for Printing System Development Project (openSUSE_Leap_42.1) Retrieving: repomd.xml.asc .........................[done] Retrieving: repomd.xml.key .........................[done] Retrieving: repomd.xml .............................[done] New repository or package signing key received: Repository: Printing System Development Project (openSUSE_Leap_42.1) Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Thu 22 May 2014 14:07:15 CEST Key Expires: Sat 30 Jul 2016 14:07:15 CEST (expires in 11 days) Rpm Name: gpg-pubkey-98c4529d-537de873 ------------------------------------------------------------------------

I notice same Key Fingerprint but different Key Created times and different Rpm Name but I am not at all an expert in those stuff (neither in GPG nor in the OBS way how it handles keys).

Kind Regards Johannes Meixner

-- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.1 Kernel: 4.6.3-1-default "openSUSE Tumbleweed (20160715) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Marcus Hüwe

10:26

On 2016-07-19 10:39:26 +0100, ianseeks wrote:

...

On Tuesday, 19 July 2016 11:01:54 BST Johannes Meixner wrote:

...
Hello,

On Jul 16 09:38 ianseeks wrote (excerpt):

...
Retrieving repository 'Printing' metadata The gpg key signing file 'repomd.xml' will expire in 14 days.

Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

I have no idea how to fix that.

Yesterday I did what I was told to do last time (and what seems to have helped last time): --------------------------------------------------------------- $ osc signkey --extend Printing <status code="ok" /> $ ---------------------------------------------------------------

I don't have "osc" on my system. If i try to install it, it wants to bring in loads of dependencies - do i really want to do this?

The maintainer of the "Printing" project has to extend the key (and already did it). Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

ianseeks

11:34

On Tuesday, 19 July 2016 12:26:04 BST Marcus Hüwe wrote:

...

On 2016-07-19 10:39:26 +0100, ianseeks wrote:

...
On Tuesday, 19 July 2016 11:01:54 BST Johannes Meixner wrote:

...
Hello,

On Jul 16 09:38 ianseeks wrote (excerpt):

...
Retrieving repository 'Printing' metadata The gpg key signing file 'repomd.xml' will expire in 14 days.

Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

I have no idea how to fix that.

Yesterday I did what I was told to do last time (and what seems to have helped last time): --------------------------------------------------------------- $ osc signkey --extend Printing <status code="ok" /> $ ---------------------------------------------------------------

I don't have "osc" on my system. If i try to install it, it wants to bring in loads of dependencies - do i really want to do this?

The maintainer of the "Printing" project has to extend the key (and already did it). Thanks, i thought as much

Marcus

-- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.1 Kernel: 4.6.3-1-default "openSUSE Tumbleweed (20160716) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

ianseeks

21 Jul 21 Jul

16:05

On Tuesday, 19 July 2016 12:26:04 BST Marcus Hüwe wrote:

...

On 2016-07-19 10:39:26 +0100, ianseeks wrote:

...
On Tuesday, 19 July 2016 11:01:54 BST Johannes Meixner wrote:

...
Hello,

On Jul 16 09:38 ianseeks wrote (excerpt):

...
Retrieving repository 'Printing' metadata The gpg key signing file 'repomd.xml' will expire in 14 days.

Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

I have no idea how to fix that.

Yesterday I did what I was told to do last time (and what seems to have helped last time): --------------------------------------------------------------- $ osc signkey --extend Printing <status code="ok" /> $ ---------------------------------------------------------------

I don't have "osc" on my system. If i try to install it, it wants to bring in loads of dependencies - do i really want to do this?

The maintainer of the "Printing" project has to extend the key (and already did it). He has yet to release it. So hopefully soon... Today's zypper dup Retrieving repository 'Printing' metadata

[\] The gpg key signing file 'repomd.xml' will expire in 8 days. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 8 days) Rpm Name: gpg-pubkey-98c4529d-47965624

...

Marcus

-- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.2 Kernel: 4.6.4-1-default "openSUSE Tumbleweed (20160720) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Carlos E. R.

19 Jul 19 Jul

10:38

On 2016-07-19 11:39, ianseeks wrote:

...

On Tuesday, 19 July 2016 11:01:54 BST Johannes Meixner wrote:

...

I don't have "osc" on my system. If i try to install it, it wants to bring in loads of dependencies - do i really want to do this?

Not you. He. :-) -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)

ianseeks

11:34

On Tuesday, 19 July 2016 12:38:25 BST Carlos E. R. wrote:

...

On 2016-07-19 11:39, ianseeks wrote:

...
On Tuesday, 19 July 2016 11:01:54 BST Johannes Meixner wrote:

I don't have "osc" on my system. If i try to install it, it wants to bring in loads of dependencies - do i really want to do this?

Not you. He. :-)

Phew :o) -- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.1 Kernel: 4.6.3-1-default "openSUSE Tumbleweed (20160716) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Marcus Meissner

28 Jul 28 Jul

11:08

On Tue, Jul 19, 2016 at 11:01:54AM +0200, Johannes Meixner wrote:

...

Hello,

On Jul 16 09:38 ianseeks wrote (excerpt):

...
Retrieving repository 'Printing' metadata The gpg key signing file 'repomd.xml' will expire in 14 days. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

I have no idea how to fix that.

The GPG keys auto-extends their lifetime usually. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

ianseeks

29 Jul 29 Jul

18:24

On Thursday, 28 July 2016 13:08:23 BST Marcus Meissner wrote:

...

On Tue, Jul 19, 2016 at 11:01:54AM +0200, Johannes Meixner wrote:

...
Hello,

On Jul 16 09:38 ianseeks wrote (excerpt):

...
Retrieving repository 'Printing' metadata The gpg key signing file 'repomd.xml' will expire in 14 days.

Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

I have no idea how to fix that.

The GPG keys auto-extends their lifetime usually.

Ciao, Marcus I hope so... Todays zypper dup

Retrieving repository 'Printing' metadata ------------------------------------------------------------------------------------------------------------------------------------------- [\] The gpg key signing file 'repomd.xml' will expire in 0 days. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires within 24h) Rpm Name: gpg-pubkey-98c4529d-47965624 -- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.2 Kernel: 4.6.4-2-default "openSUSE Tumbleweed (20160726) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Dominique Leuenberger / DimStar

18:45

On Fri, 2016-07-29 at 19:24 +0100, ianseeks wrote:

...

[\] The gpg key signing file 'repomd.xml' will expire in 0 days. Repository: Printing Key Name: Printing OBS Project
...
Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires within 24h) Rpm Name: gpg-pubkey-98c4529d-47965624

What URL are you getting your 'Printing' repository from? Based on your signature I'd guess you use openSUSE_Tumbleweed, where the key is long updated already: curl http://download.opensuse.org/repositories/Printing/openSUSE_Tumble weed/repodata/repomd.xml.key | gpg pub dsa1024 2008-01-22 [SC] [expires: 2018-09-26] 7C8A8DA1722FC4DFDA9FF1EF669DEC9F98C4529D uid Printing OBS Project The published key in this repo is valid for 2 more years. Cheers, Dominique

ianseeks

30 Jul 30 Jul

07:37

On Friday, 29 July 2016 20:45:26 BST Dominique Leuenberger / DimStar wrote:

...

On Fri, 2016-07-29 at 19:24 +0100, ianseeks wrote:

...
[\] The gpg key signing file 'repomd.xml' will expire in 0 days. Repository: Printing

Key Name: Printing OBS Project
Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires within 24h) Rpm Name: gpg-pubkey-98c4529d-47965624

What URL are you getting your 'Printing' repository from? Based on your signature I'd guess you use openSUSE_Tumbleweed, where the key is long updated already:

curl http://download.opensuse.org/repositories/Printing/openSUSE_Tumble weed/repodata/repomd.xml.key | gpg

pub dsa1024 2008-01-22 [SC] [expires: 2018-09-26] 7C8A8DA1722FC4DFDA9FF1EF669DEC9F98C4529D uid Printing OBS Project

The published key in this repo is valid for 2 more years.

Cheers, Dominique Yes, thats the one. http://download.opensuse.org/repositories/Printing/ openSUSE_Tumbleweed/ Do you know why i get this report during zypper? If i check the GPG button on Yast - Software Repositories, i get Key: 669DEC9F98C4529D Name: Printing OBS Project Finger Print: 7C8A8DA1722FC4DFDA9FF1EF669DEC9F98C4529D Created: 22/01/08 Expires: 30/07/16

There a couple more "out of date key" in the list, the "Vivaldi Package composer" which i'm not bothered about and the "SuSE Package Signing key :- Key: E3A5C360307E3D54 Name: SuSE Package Signing Key Finger Print: 4E98E67519D98DC7362A5990E3A5C360307E3D54 Created: 21/03/06 Expires: 03/05/14 (The key is expired.) I was only posting the issue for information purposes in case it was needed. -- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.2 Kernel: 4.6.4-2-default "openSUSE Tumbleweed (20160726) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

ianseeks

7 Aug 7 Aug

08:56

On Saturday, 16 July 2016 09:38:11 BST ianseeks wrote:

...

Hi

Just got this message (see below) during a "zypper dup" - not sure if its significant but I just thought i'd post it as a reminder.

Regards

Ian

Retrieving repository 'Printing' metadata ---------------------------------------------------------------------------- --------------------------------------------------------------- [\] The gpg key signing file 'repomd.xml' will expire in 14 days. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

Its expired now. Retrieving repository 'Printing' metadata ------------------------------------------------------------------------------------------------------------------------------------------- [\] Warning: The gpg key signing file 'repomd.xml' has expired. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (EXPIRED) Rpm Name: gpg-pubkey-98c4529d-47965624 -- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.3 Kernel: 4.7.0-1-default "openSUSE Tumbleweed (20160803) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Thomas Leineweber

8 Aug 8 Aug

18:39

Am 07.08.2016 um 10:56 schrieb ianseeks:

...

Its expired now.

Retrieving repository 'Printing' metadata ------------------------------------------------------------------------------------------------------------------------------------------- [\] Warning: The gpg key signing file 'repomd.xml' has expired. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (EXPIRED) Rpm Name: gpg-pubkey-98c4529d-47965624

Most probably, you are not using the URL http://download.opensuse.org/repositories/Printing/openSUSE_Tumbleweed/ but http://download.opensuse.org/repositories/Printing/openSUSE_Factory/ For openSUSE_Factory publishing is disabled, so the gpg key can not be refreshed. Please check again your repositories. Thomas -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

ianseeks

9 Aug 9 Aug

06:35

On Monday, 8 August 2016 20:39:57 BST Thomas Leineweber wrote:

...

Am 07.08.2016 um 10:56 schrieb ianseeks:

...
Its expired now.

Retrieving repository 'Printing' metadata -------------------------------------------------------------------------- ----------------------------------------------------------------- [\] Warning: The gpg key signing file 'repomd.xml' has expired.

Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (EXPIRED) Rpm Name: gpg-pubkey-98c4529d-47965624

Most probably, you are not using the URL

http://download.opensuse.org/repositories/Printing/openSUSE_Tumbleweed/

but

http://download.opensuse.org/repositories/Printing/openSUSE_Factory/

For openSUSE_Factory publishing is disabled, so the gpg key can not be refreshed. Please check again your repositories.

Thomas This is the one i'm using URL: http://download.opensuse.org/repositories/Printing/openSUSE_Tumbleweed/

-- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.3 Kernel: 4.7.0-1-default "openSUSE Tumbleweed (20160805) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Thomas Leineweber

20:07

Am 2016-08-09 08:35, schrieb ianseeks:

...

On Monday, 8 August 2016 20:39:57 BST Thomas Leineweber wrote:

...
Am 07.08.2016 um 10:56 schrieb ianseeks:

...
Its expired now.

Retrieving repository 'Printing' metadata -------------------------------------------------------------------------- ----------------------------------------------------------------- [\] Warning: The gpg key signing file 'repomd.xml' has expired.

Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (EXPIRED) Rpm Name: gpg-pubkey-98c4529d-47965624

Most probably, you are not using the URL

http://download.opensuse.org/repositories/Printing/openSUSE_Tumbleweed/

but

http://download.opensuse.org/repositories/Printing/openSUSE_Factory/

For openSUSE_Factory publishing is disabled, so the gpg key can not be refreshed. Please check again your repositories.

Thomas This is the one i'm using URL: http://download.opensuse.org/repositories/Printing/openSUSE_Tumbleweed/

The certificate above corresponds to the Factory Repo, not the Tumbleweed repo. please show your full repository list with the URL: zypper lr -u Thomas -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

ianseeks

10 Aug 10 Aug

08:24

On Tuesday, 9 August 2016 22:07:33 BST Thomas Leineweber wrote:

...

Am 2016-08-09 08:35, schrieb ianseeks:

...
On Monday, 8 August 2016 20:39:57 BST Thomas Leineweber wrote:

...
Am 07.08.2016 um 10:56 schrieb ianseeks:

...
Its expired now.

Retrieving repository 'Printing' metadata ----------------------------------------------------------------------- --- ----------------------------------------------------------------- [\] Warning: The gpg key signing file 'repomd.xml' has expired.

Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (EXPIRED) Rpm Name: gpg-pubkey-98c4529d-47965624

Most probably, you are not using the URL

http://download.opensuse.org/repositories/Printing/openSUSE_Tumbleweed/

but

http://download.opensuse.org/repositories/Printing/openSUSE_Factory/

For openSUSE_Factory publishing is disabled, so the gpg key can not be refreshed. Please check again your repositories.

Thomas

This is the one i'm using URL: http://download.opensuse.org/repositories/Printing/openSUSE_Tumbleweed/

The certificate above corresponds to the Factory Repo, not the Tumbleweed repo.

please show your full repository list with the URL:

zypper lr -u

Thomas Its definitely http://download.opensuse.org/repositories/Printing/ openSUSE_Tumbleweed/, The only repos i have referencing "Factory" in the repo name are:- Applications (http://download.opensuse.org/repositories/KDE:/Applications/ openSUSE_Factory_standard ) Frameworks5 (http://download.opensuse.org/repositories/KDE:/Frameworks5/ openSUSE_Factory ) and Libreoffice (http://download.opensuse.org/repositories/LibreOffice:/ Factory/openSUSE_Factory/)

-- Qt: 5.6.1 KDE Frameworks: 5.24.0 kf5-config: 1.0 KDE Plasma: 5.7.3 Kernel: 4.7.0-1-default "openSUSE Tumbleweed (20160806) (x86_64)" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Thomas Leineweber

08:28

Am 2016-08-10 10:24, schrieb ianseeks:

...

On Tuesday, 9 August 2016 22:07:33 BST Thomas Leineweber wrote:

...
please show your full repository list with the URL:

zypper lr -u

Thomas Its definitely http://download.opensuse.org/repositories/Printing/ openSUSE_Tumbleweed/, The only repos i have referencing "Factory" in the repo name are:- Applications (http://download.opensuse.org/repositories/KDE:/Applications/ openSUSE_Factory_standard ) Frameworks5 (http://download.opensuse.org/repositories/KDE:/Frameworks5/ openSUSE_Factory ) and Libreoffice (http://download.opensuse.org/repositories/LibreOffice:/ Factory/openSUSE_Factory/)

ok, I give up. I asked for a specific and full repository list. I won't do anything more as you do not provide the needed information. Thomas -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Dominique Leuenberger / DimStar

08:31

On Sun, 2016-08-07 at 09:56 +0100, ianseeks wrote:

...

On Saturday, 16 July 2016 09:38:11 BST ianseeks wrote:

...
Hi

Just got this message (see below) during a "zypper dup" - not sure if its significant but I just thought i'd post it as a reminder.

Regards

Ian

Retrieving repository 'Printing' metadata ----------------------------------------------------------------- ----------- --------------------------------------------------------------- [\] The gpg key signing file 'repomd.xml' will expire in 14 days. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

Its expired now.

It seems zypper is not seeing that there is a new key published in the repo - I'd recommend to file a bug for this. The key in the repository is definitively correct: curl http://download.opensuse.org/repositories/Printing/openSUSE_Tumble weed/repodata/repomd.xml.key | gpg pub dsa1024 2008-01-22 [SC] [expires: 2018-09-26] 7C8A8DA1722FC4DFDA9FF1EF669DEC9F98C4529D uid Printing OBS Project you can try if loading YaST / Package Manager might give some more hints about this - but in any case, zypp should also tell if the key changes and ask you what to do... Cheers, Dominique

Bruno Friedmann

15:41

On mercredi, 10 août 2016 10.31:05 h CEST Dominique Leuenberger / DimStar wrote:

...

On Sun, 2016-08-07 at 09:56 +0100, ianseeks wrote:

...
On Saturday, 16 July 2016 09:38:11 BST ianseeks wrote:

...
Hi

Just got this message (see below) during a "zypper dup" - not sure if its significant but I just thought i'd post it as a reminder.

Regards

Ian

Retrieving repository 'Printing' metadata ----------------------------------------------------------------- ----------- --------------------------------------------------------------- [\] The gpg key signing file 'repomd.xml' will expire in 14 days. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

Its expired now.

It seems zypper is not seeing that there is a new key published in the repo - I'd recommend to file a bug for this.

The key in the repository is definitively correct: curl http://download.opensuse.org/repositories/Printing/openSUSE_Tumble weed/repodata/repomd.xml.key | gpg

pub dsa1024 2008-01-22 [SC] [expires: 2018-09-26] 7C8A8DA1722FC4DFDA9FF1EF669DEC9F98C4529D uid Printing OBS Project

you can try if loading YaST / Package Manager might give some more hints about this - but in any case, zypp should also tell if the key changes and ask you what to do...

Cheers, Dominique

Interesting, I've to renew my key a few days ago (was saturday or sunday) and today a zypper -v ref -f (my usual way) show me the new key is available on mirror zypper se -s libx11-devel Retrieving repository 'bf-app-geo' metadata ------------------------------------------------------------------------------------------------------------------------------------------- [\] New repository or package signing key received: Repository: bf-app-geo Key Name: home:bruno_friedmann OBS Project home:bruno_friedmann@build.opensuse.org Key Fingerprint: 7199A2A3 EA883555 46662CCE 089AB0AB 6B9BEF7B Key Created: Sun Aug 7 20:30:02 2016 Key Expires: Tue Oct 16 20:30:02 2018 Rpm Name: gpg-pubkey-6b9bef7b-57a77e2a Do you want to reject the key, trust temporarily, or trust always? [r/t/a/? shows all options] (r): a so it is not completely zypper just a part of :-) -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch Bareos Partner, openSUSE Member, fsfe fellowship GPG KEY : D5C9B751C4653227 irc: tigerfoot -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

ianseeks

17:56

On Wednesday, 10 August 2016 10:31:05 BST Dominique Leuenberger / DimStar wrote:

...

On Sun, 2016-08-07 at 09:56 +0100, ianseeks wrote:

...
On Saturday, 16 July 2016 09:38:11 BST ianseeks wrote:

...
Hi

Just got this message (see below) during a "zypper dup" - not sure if its significant but I just thought i'd post it as a reminder.

Regards

Ian

Retrieving repository 'Printing' metadata ----------------------------------------------------------------- ----------- --------------------------------------------------------------- [\] The gpg key signing file 'repomd.xml' will expire in 14 days. Repository: Printing Key Name: Printing OBS Project Key Fingerprint: 7C8A8DA1 722FC4DF DA9FF1EF 669DEC9F 98C4529D Key Created: Tue 22 Jan 2008 20:46:28 GMT Key Expires: Sat 30 Jul 2016 13:07:15 BST (expires in 14 days) Rpm Name: gpg-pubkey-98c4529d-47965624

Its expired now.

It seems zypper is not seeing that there is a new key published in the repo - I'd recommend to file a bug for this.

The key in the repository is definitively correct: curl http://download.opensuse.org/repositories/Printing/openSUSE_Tumble weed/repodata/repomd.xml.key | gpg

pub dsa1024 2008-01-22 [SC] [expires: 2018-09-26] 7C8A8DA1722FC4DFDA9FF1EF669DEC9F98C4529D uid Printing OBS Project

you can try if loading YaST / Package Manager might give some more hints about this - but in any case, zypp should also tell if the key changes and ask you what to do...

I did a "zypper dup" and it just displayed the message and carried on without giving any choices.

...

Cheers, Dominique

2817

Age (days ago)

2842

Last active (days ago)

List overview

Download

22 comments

8 participants

participants (8)

Bruno Friedmann
Carlos E. R.
Dominique Leuenberger / DimStar
ianseeks
Johannes Meixner
Marcus Hüwe
Marcus Meissner
Thomas Leineweber

[opensuse-factory] Gpg key expiring

tags

participants (8)