-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2010-08-03 09:39, Marcus Meissner wrote:
On Tue, Aug 03, 2010 at 03:50:20AM +0200, Carlos E. R. wrote:
They are all obsolete.
Just a sample:
pub 1024D/BD6D129A 2008-01-22 [expired: 2010-04-01] uid Apache OBS Project
Needs to be extended by Apache project owner.
That was just a sample, I have been told that all repos are affected. And, AFAIK, there is no way to contact OBS maintainers.
pub 1024D/6B9D6523 2006-05-24 [expired: 2008-05-23] uid openSUSE Build Service
Not really sure if this one is used anymore. Did you see it used by any repo? We use RSA keys in current setups to have the longer checksums.
I don't know, but it appeared in my key ring after importing keys from two repos. I was just testing to replicate what another person had said in the forum. So I think that yes, it is in use, but I don't remember where from. Ah, yes, it is in the download history of firefox: http://download.opensuse.org/repositories/GNOME:/STABLE:/2.30/openSUSE_11.3/... As I said, that just a sample, random, test. The claim is that all 11.3 repos are affected - which of course means all the repos the original reporter in the opensuse.org.help.applications forum tried to add.
pub 1024D/9C800ACA 2000-10-19 [expired: 2010-05-05] uid SuSE Package Signing Key
Was pushed out via suse-build-key/openSUSE-build-key updates, but not to the keyservers ... I did that now for all the ones.
Unfortunately, unless you did that very recently, not all keyservers have it. As I commented to Stephan a minute ago, wwwkeys.eu.pgp.net has it, but pgp.mit.edu and keyserver.pgp.com doesn't.
And yes, there is a bugzilla. No reply in several days.
If you reference a Bugzilla entry in a mail, please always state the bugzilla number, so no one has to ask for it.
That was a note so that nobody asked me to write a bugzilla >:-) Ok, it is "626876". - -- Cheers / Saludos, Carlos E. R. (from 11.2 x86_64 "Emerald" GM (Elessar)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAkxX3Q0ACgkQU92UU+smfQUf6ACgjCRuhvOhq6ftfhnIitKJDauh +CYAn32TodmtUS4qqBGbA3XRuqfDt7aG =BLpU -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org