going nuts with rpm --checksig / gpg, works on suse 7.3, doesnt work on suse 8.0
hi all,
gpg / rpm --checksig
are driving me crazy....
i have two systems... suse 7.3 the one, suse 8.0 the other...
i have downloaded to both systems the latest webmin 1.060
webmin-1.060-1.noarch.rpm, and they gpg/pgp key from the author
http://switch.dl.sourceforge.net/sourceforge/webadmin/webmin-1.060-1.noarch....
http://www.webmin.com/jcameron-key.asc
the problem is, the one system gives me errors when rpm --checksig webmin-1.060-1.noarch.rpm
the other system works fine... both have gpg installed and i have imported the public key of the webmin author...
i dont see any difference...
see here:
the correctly working system (suse 7.3)
# gpg --list-keys -v
/root/.gnupg/pubring.gpg
------------------------
gpg: NOTE: signature key 9C800ACA expired Sat Oct 19 15:17:53 2002 CEST
pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key
On Feb 7, Andreas Bittner
hi all,
gpg / rpm --checksig are driving me crazy....
i have two systems... suse 7.3 the one, suse 8.0 the other... [...] the problem is, the one system gives me errors when rpm --checksig webmin-1.060-1.noarch.rpm the other system works fine... both have gpg installed and i have imported the public key of the webmin author... i dont see any difference... [...] sig B1CA3C45 1999-03-06 [User id not found] You must import the key into the keyring of the RPM system export GPGHOME=/usr/lib/rpm/gpg ... import the key ...
If you had done sig checking NOT AS ROOT, it would have worked. It's not a bug, it's a feature ... ;) Markus -- __________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign markus@gaugusch.at X Against HTML Mail / \
----- Original Message -----
From: "Markus Gaugusch"
On Feb 7, Andreas Bittner
wrote: hi all,
gpg / rpm --checksig are driving me crazy....
i have two systems... suse 7.3 the one, suse 8.0 the other... [...] the problem is, the one system gives me errors when rpm --checksig webmin-1.060-1.noarch.rpm the other system works fine... both have gpg installed and i have imported the public key of the webmin author... i dont see any difference... [...] sig B1CA3C45 1999-03-06 [User id not found] You must import the key into the keyring of the RPM system export GPGHOME=/usr/lib/rpm/gpg ... import the key ... If you had done sig checking NOT AS ROOT, it would have worked. hmm dont understand...
during execution i was root on both systems... what has changed from suse 7.3 to 8.0?? i havent been using gpg/rpm with a normal user account at all... all the pub keys have been imported to the root keyrings... the normal users have never been using gpg... gpg --list-keys returns empty stuff.... so why does it work with suse 7.3 but doesnt work with suse 8.0.... i mean the key from the webmin author IS THERE in the keyring of root on both systems... what the heck does it tell me it cant find the pub key then on the 8.0 system ????
during execution i was root on both systems... what has changed from suse 7.3 to 8.0?? i havent been using gpg/rpm with a normal user account at all... all the pub keys have been imported to the root keyrings... the normal users have never been using gpg... Yes it has changed between 7.3 and 8.0. rpm --verify uses NOT the keyring of root (if run as root), but the keyring in /usr/lib/rpm/gnupg. (Sorry, had a type in last mail. this
On Feb 7, Andreas Bittner
i mean the key from the webmin author IS THERE in the keyring of root on both systems... what the heck does it tell me it cant find the pub key then on the 8.0 system ???? As I said, it changed and 8.0 doesn't use root's keyring.
Markus -- __________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign markus@gaugusch.at X Against HTML Mail / \
participants (2)
-
Andreas Bittner
-
Markus Gaugusch