On Thu, Aug 07, 2014 at 12:22:52PM +0200, Martin Juhl wrote:
I have already symlinked /root/.gnupg -> /srv/obs/gnupg.. so there should be no problems there...
ttprpm01:/srv/obs/log # gpg --list-keys /root/.gnupg/pubring.gpg
pub 2048R/C7BCE95C 2014-08-06 uid OBS Service obsrun@localhost sub 2048R/9465426D 2014-08-06 sub 1024D/AA31904F 2014-08-06 sub 2048g/07044FF8 2014-08-06
ttprpm01:/srv/obs/log # gpg --list-secret-keys /root/.gnupg/secring.gpg
sec 2048R/C7BCE95C 2014-08-06 uid OBS Service obsrun@localhost ssb 2048R/9465426D 2014-08-06 ssb 1024D/AA31904F 2014-08-06 ssb 2048g/07044FF8 2014-08-06
The sign daemon also seems to work, and as I wrote I can sign packages by hand (sign <package>)...
Hmm, so did you do an OBS update or something similar? The private keys of all OBS projects are encrypted with the OBS master key ("obsrun@localhost"), so if you change that master key the project keys will no longer work.
Cheers, Michael.
I have generated the obsrun@localhost key myself...
Should that be a problem???
There was no project in the server before I did this, as it's a new installation...
/Martin
----- Original meddelelse ----- Fra: "Michael Schroeder" mls@suse.de Til: "Martin Juhl" mj@casalogic.dk Cc: "openSUSE build service mailing list" opensuse-buildservice@opensuse.org Sendt: torsdag, 7. august 2014 12:31:58 Emne: Re: [opensuse-buildservice] gpg: decryption failed: No secret key
On Thu, Aug 07, 2014 at 12:22:52PM +0200, Martin Juhl wrote:
I have already symlinked /root/.gnupg -> /srv/obs/gnupg.. so there should be no problems there...
ttprpm01:/srv/obs/log # gpg --list-keys /root/.gnupg/pubring.gpg
pub 2048R/C7BCE95C 2014-08-06 uid OBS Service obsrun@localhost sub 2048R/9465426D 2014-08-06 sub 1024D/AA31904F 2014-08-06 sub 2048g/07044FF8 2014-08-06
ttprpm01:/srv/obs/log # gpg --list-secret-keys /root/.gnupg/secring.gpg
sec 2048R/C7BCE95C 2014-08-06 uid OBS Service obsrun@localhost ssb 2048R/9465426D 2014-08-06 ssb 1024D/AA31904F 2014-08-06 ssb 2048g/07044FF8 2014-08-06
The sign daemon also seems to work, and as I wrote I can sign packages by hand (sign <package>)...
Hmm, so did you do an OBS update or something similar? The private keys of all OBS projects are encrypted with the OBS master key ("obsrun@localhost"), so if you change that master key the project keys will no longer work.
Cheers, Michael.
buildservice@lists.opensuse.org