Re: [suse-security] going nuts with rpm --checksig / gpg, works on suse 7.3, doesnt work on suse 8.0

----- Original Message ----- From: "Markus Gaugusch" To: "SuSE-Security" Sent: Friday, February 07, 2003 8:30 PM Subject: Re: [suse-security] going nuts with rpm --checksig / gpg, works on suse 7.3, doesnt work on suse 8.0

On Feb 7, Andreas Bittner wrote:

...

hi all,

gpg / rpm --checksig are driving me crazy....

i have two systems... suse 7.3 the one, suse 8.0 the other... [...] the problem is, the one system gives me errors when rpm --checksig webmin-1.060-1.noarch.rpm the other system works fine... both have gpg installed and i have imported the public key of the webmin author... i dont see any difference... [...] sig B1CA3C45 1999-03-06 [User id not found] You must import the key into the keyring of the RPM system export GPGHOME=/usr/lib/rpm/gpg ... import the key ... If you had done sig checking NOT AS ROOT, it would have worked. hmm dont understand...

during execution i was root on both systems... what has changed from suse 7.3 to 8.0?? i havent been using gpg/rpm with a normal user account at all... all the pub keys have been imported to the root keyrings... the normal users have never been using gpg... gpg --list-keys returns empty stuff.... so why does it work with suse 7.3 but doesnt work with suse 8.0.... i mean the key from the webmin author IS THERE in the keyring of root on both systems... what the heck does it tell me it cant find the pub key then on the 8.0 system ????