https://bugzilla.novell.com/show_bug.cgi?id=468750 Summary: apt is not apted to use opensuse-update - "unsigned package" Classification: openSUSE Product: openSUSE 11.1 Version: Final Platform: x86-64 OS/Version: openSUSE 11.1 Status: NEW Severity: Normal Priority: P5 - None Component: Maintenance AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: werner.flamme@ufz.de QAContact: qa@suse.de Found By: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20 Hi, first I complained at security mailing list about unsigned packages in the update repo, but then the problem could be reduced to apt. The update channel in 11.1 seems to use pgp to sign the pagages, since one can read "/var/cache/apt/archives/xrdp_0.4.1-16.6.2_x86%5f64.rpm: rsa sha1 (md5) pgp md5 OK" when doing "rpm --checksig". In older versions of openSUSE, there was a "gpg" instead of "pgp" in this line. Since apt parses this output line, and no "gpg" is found, apt claims that this package is unsigned - which is obviously not the case. As a workaround, I added 2 lines in /usr/lib64/apt/scripts/gpg-checker.lua: old: if string.find(line, "gpg") then old: break add: elsif string.find(line, "pgp") then add: break Now updates are handled as signed packages again, tested with the "daily update" ;-) of xrdp yesterday. Hope this is of some use. Regards, Werner Reproducible: Always Steps to Reproduce: 1. apt update (with http://download.opensuse.org/updates/11.1 as source) 2. apt upgrade 3. see "E: Error(s) while checking package signatures: 1 unsigned package(s)" Actual Results: The upgrade works fine again :-) Expected Results: Should install (security) updates without false complaints -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.