[Bug 626876] New: Many or all the PGP keys of the OBS are expired.
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c0
Summary: Many or all the PGP keys of the OBS are expired.
Classification: openSUSE
Product: openSUSE 11.3
Version: Final
Platform: Other
OS/Version: Other
Status: NEW
Severity: Major
Priority: P5 - None
Component: Security
AssignedTo: security-team@suse.de
ReportedBy: carlos.e.r@opensuse.org
QAContact: qa@suse.de
Found By: ---
Blocker: ---
Download keys - two repos choosen randomly:
http://download.opensuse.org/repositories/GNOME:/STABLE:/2.30/openSUSE_11.3/...
http://download.opensuse.org/repositories/Apache:/Modules/openSUSE_11.3/repo...
Both keys the gpg command, after importing them, say they are expired - months
ago.
pub 1024D/BD6D129A 2008-01-22 [expired: 2010-04-01]
uid Apache OBS Project
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c1
Jon Cosby
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c2
--- Comment #2 from Jon Cosby
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c3
Adrian Schröter
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c4
Carlos Robinson
It is up to the project owners to extend or recreate their gpg keys. (via "osc signkey")
That is not acceptable. Users have not access to that, and as said, it affects the WHOLE OBS, which is part of openSUSE. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c5
Adrian Schröter
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c6
--- Comment #6 from Carlos Robinson
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c7
Jon Cosby
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c
Jon Cosby
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c8
Cristian Morales Vega
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c9
Marcus Meissner
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c10
--- Comment #10 from Cristian Morales Vega
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c11
--- Comment #11 from Jon Cosby
Jon, this result is printed always on import of a repo with a new key, regardless of whether the key is expired or not.
That doesn't make sense. Why doesn't it show the expiration date of the imported key? I'm noticing the April 1st (Fool's Day) date on these; is this an inside joke? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626876
http://bugzilla.novell.com/show_bug.cgi?id=626876#c12
--- Comment #12 from Marcus Meissner
https://bugzilla.novell.com/show_bug.cgi?id=626876
https://bugzilla.novell.com/show_bug.cgi?id=626876#c13
Juergen Weigert
https://bugzilla.novell.com/show_bug.cgi?id=626876
https://bugzilla.novell.com/show_bug.cgi?id=626876#c14
Juergen Weigert
https://bugzilla.novell.com/show_bug.cgi?id=626876
https://bugzilla.novell.com/show_bug.cgi?id=626876#c15
Michael Schröder
participants (1)
-
bugzilla_noreply@novell.com