http://bugzilla.novell.com/show_bug.cgi?id=626876 http://bugzilla.novell.com/show_bug.cgi?id=626876#c1 Jon Cosby changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jon.l.cosby@gmail.com --- Comment #1 from Jon Cosby 2010-07-30 02:35:44 UTC --- I can confirm this. Happens every time I try to add an OBS repo. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=626876 http://bugzilla.novell.com/show_bug.cgi?id=626876#c3 Adrian Schröter changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WONTFIX --- Comment #3 from Adrian Schröter 2010-08-03 09:38:08 UTC --- It is up to the project owners to extend or recreate their gpg keys. (via "osc signkey") -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=626876 http://bugzilla.novell.com/show_bug.cgi?id=626876#c5 Adrian Schröter changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |WONTFIX --- Comment #5 from Adrian Schröter 2010-08-03 10:47:21 UTC --- no, all important projects where I am included have current keys. No single warning of zypper (and you can ignore it anyway). I will not modify user data, this is not acceptable either. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=626876 http://bugzilla.novell.com/show_bug.cgi?id=626876#c7 Jon Cosby changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|WONTFIX | --- Comment #7 from Jon Cosby 2010-08-03 13:13:34 UTC --- This isn't a problem of the projects themselves. There is something wrong with zypper or communication w/OBS. I can't import a valid key from /any/ of the repos on OBS, I get output similar to the following (same dates in each case): # zypper ar http://download.opensuse.org/repositories/Banshee/openSUSE_11.3 banshee Adding repository 'banshee' [done] Repository 'banshee' successfully added Enabled: Yes Autorefresh: No URI: http://download.opensuse.org/repositories/Banshee/openSUSE_11.3 # zypper ref -r banshee Retrieving repository 'banshee' metadata [/] New repository or package signing key received: Key ID: B3431194A86BE6FC Key Name: Banshee OBS Project Key Fingerprint: 827604F45F66AE05548C12DEB3431194A86BE6FC Key Created: Tue Jan 22 12:45:40 2008 Key Expires: Thu Apr 1 13:45:40 2010 (EXPIRED) Repository: banshee Do you want to reject the key, trust temporarily, or trust always? [r/t/a/?] (r) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=626876 http://bugzilla.novell.com/show_bug.cgi?id=626876#c8 Cristian Morales Vega changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED CC| |cmorve69@yahoo.es Resolution| |WONTFIX --- Comment #8 from Cristian Morales Vega 2010-08-03 14:49:29 UTC --- Banshee is a great example of a repository with an expired key... Try with http://download.opensuse.org/repositories/home:/RedDwarf/openSUSE_11.3/ "zypper or communication w/OBS" works just fine here. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=626876 http://bugzilla.novell.com/show_bug.cgi?id=626876#c10 --- Comment #10 from Cristian Morales Vega 2010-08-04 09:25:32 UTC --- IMHO hermes support would be the best way to make maintainers know about the problem. Someone already commented that in the mailing list. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=626876 http://bugzilla.novell.com/show_bug.cgi?id=626876#c12 --- Comment #12 from Marcus Meissner 2010-08-04 15:19:23 UTC --- it seems to show the expiration date on the trust dialog: "Key Expires: Thu Apr 1 13:45:40 2010 (EXPIRED)" as it obvious from above paste. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=626876 https://bugzilla.novell.com/show_bug.cgi?id=626876#c14 Juergen Weigert changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEEDINFO Version|Final |backend InfoProvider| |mls@suse.com Component|Security |backend AssignedTo|security-team@suse.de |mls@suse.com Product|openSUSE 11.3 |openSUSE Build Service QAContact|qa@suse.de |adrian@suse.com Target Milestone|--- |master --- Comment #14 from Juergen Weigert 2012-03-14 18:22:21 UTC --- Micha, what about the following ideas, I beleive this could be helpful: - an autogenerated key-extend-request could give heads up warnings to maintainers when (e.g.) less than 3 months are left. - the publisher could refuse to publish into repos when the key is expired. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.