On Tue, Jan 22, 2008 at 06:17:54PM +0100, Manfred Hollstein wrote:
On Tue, 22 Jan 2008, 13:02:47 +0100, Adrian Schröter wrote:
On Tuesday 22 January 2008 12:45:54 wrote Michael Schroeder:
Hi build service users,
all top-level projects (e.g. KDE, home:<user>,...) now have their own sign key. Projects further down the hierarchy inherit the sign key.
We'll add some key management functions to the API soon.
This change will lead to popups for the user to trust the new key. YaST and zypper do handle this nicely as far as we tested.
Will these new keys be made publicly available/known to GPG key servers? This would be needed for some other package management tools (like apt-get). Right now, I cannot install the new packages from the mozilla/openSUSE-10.2 repository any more :-( Yes, I have run the command
rpm --import http://download.opensuse.org/repositories/mozilla/openSUSE_10.2/repodata/rep...
but checking the sigs still complains:
rpm -qp /var/cache/apt/archives/mozilla-xulrunner181_1.8.1.11-2.2_i586.rpm -K /var/cache/apt/archives/mozilla-xulrunner181_1.8.1.11-2.2_i586.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#06213bd4)
yum has the same problem as you: Public key for eddie-tool-0.35r881-6.1.i586.rpm is not installed Retrieving GPG key from http://download.opensuse.org/repositories/home:/poeml/SuSE_Linux_10.1/repoda... Importing GPG key 0xA1BFE509 "home:poeml OBS Project home:poeml@build.opensuse.org" Is this ok [y/N]: y Key imported successfully Import of key(s) didn't help, wrong key(s)? And on next try: warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID a1bfe509 Public key for eddie-tool-0.35r881-6.1.i586.rpm is not installed Retrieving GPG key from http://download.opensuse.org/repositories/home:/poeml/SuSE_Linux_10.1/repoda... GPG key at http://download.opensuse.org/repositories/home:/poeml/SuSE_Linux_10.1/repoda... (0xA1BFE509) is already installed The GPG keys listed for the "Project of Peter Poeml (SuSE_Linux_10.1)" repository are already installed but they are not correct for this package. Check that the correct key URLs are configured for this repository. Peter -- "WARNING: This bug is visible to non-employees. Please be respectful!" SUSE LINUX Products GmbH Research & Development