[opensuse-buildservice] refreshed key is not published
The key below 'home:olh' expired a few day ago. I ran 'osc signkey --extend' to fix it, and 'osc signkey home:olh | gpp' shows that it appearently worked fine. But still zypper reports an expired key in my TW installation. Neither 'zypper clean -a' nor 'find /var/cache/zypp -type f -delete' help. Is ther anything else that needs to be done to use and/or publish the updated key? Olaf
On Thu, Aug 11, 2016 at 09:54:23AM +0200, Olaf Hering wrote:
The key below 'home:olh' expired a few day ago. I ran 'osc signkey --extend' to fix it, and 'osc signkey home:olh | gpp' shows that it appearently worked fine. But still zypper reports an expired key in my TW installation. Neither 'zypper clean -a' nor 'find /var/cache/zypp -type f -delete' help.
Is ther anything else that needs to be done to use and/or publish the updated key?
You need to rebuild and publish at least 1 package in this repo. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Aug 11 2016, Olaf Hering <olaf@aepfle.de> wrote:
On Thu, Aug 11, Marcus Meissner wrote:
You need to rebuild and publish at least 1 package in this repo.
I did, does not help.
The repository contains the updated key. Andreas. -- Andreas Schwab, SUSE Labs, schwab@suse.de GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE 1748 E4D4 88E3 0EEA B9D7 "And now for something completely different." -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Thu, Aug 11, Andreas Schwab wrote:
The repository contains the updated key.
I guess you are right: $ gpg < /var/cache/zypp/raw/olh/repodata/repomd.xml.key pub rsa2048 2014-05-19 [SC] [verfällt: 2018-09-27] 57169B0FAA491D563F8FE1AFE20F545F582DDE17 uid home:olh OBS Project <home:olh@build.opensuse.org> Why does libzypp not use the new key? Olaf
Hi, On 08/11/2016 10:03 AM, Olaf Hering wrote:
On Thu, Aug 11, Marcus Meissner wrote:
You need to rebuild and publish at least 1 package in this repo.
I did, does not help.
The package also needs to have a significant binary difference so as to not cause build-comare to discard identical build results and not trigger publishing. Andreas -- Andreas Stieger <astieger@suse.com> Project Manager Security SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Donnerstag, 11. August 2016, 10:22:16 CEST wrote Andreas Stieger:
Hi,
On 08/11/2016 10:03 AM, Olaf Hering wrote:
On Thu, Aug 11, Marcus Meissner wrote:
You need to rebuild and publish at least 1 package in this repo.
I did, does not help.
The package also needs to have a significant binary difference so as to not cause build-comare to discard identical build results and not trigger publishing.
you can avoid this by using "wipebinaries" instead of triggering the rebuild JFYI -- Adrian Schroeter email: adrian@suse.de SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On jeudi, 11 août 2016 10.03:16 h CEST Olaf Hering wrote:
On Thu, Aug 11, Marcus Meissner wrote:
You need to rebuild and publish at least 1 package in this repo.
I did, does not help.
Olaf
At least it has work for me from one of my repository (osc signkey) then a rebuild (new version) of a package and next zypper show the changed key zypper se -s libx11-devel Retrieving repository 'bf-app-geo' metadata ------------------------------------------------------------------------------------------------------------------------------------------- [\] New repository or package signing key received: Repository: bf-app-geo Key Name: home:bruno_friedmann OBS Project <home:bruno_friedmann@build.opensuse.org> Key Fingerprint: 7199A2A3 EA883555 46662CCE 089AB0AB 6B9BEF7B Key Created: Sun Aug 7 20:30:02 2016 Key Expires: Tue Oct 16 20:30:02 2018 Rpm Name: gpg-pubkey-6b9bef7b-57a77e2a Do you want to reject the key, trust temporarily, or trust always? [r/t/a/? shows all options] (r): a But as you can see, I make the new key sunday and only appear yesterday package rebuild also sunday. So could be slow mirror sync related too ? -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch Bareos Partner, openSUSE Member, fsfe fellowship GPG KEY : D5C9B751C4653227 irc: tigerfoot -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Thu, 2016-08-11 at 12:02 +0200, Bruno Friedmann wrote:
New repository or package signing key received:
Repository: bf-app-geo Key Name: home:bruno_friedmann OBS Project <home:bruno_friedmann@build.opensuse.org> Key Fingerprint: 7199A2A3 EA883555 46662CCE 089AB0AB 6B9BEF7B Key Created: Sun Aug 7 20:30:02 2016 Key Expires: Tue Oct 16 20:30:02 2018 Rpm Name: gpg-pubkey-6b9bef7b-57a77e2a
Do you want to reject the key, trust temporarily, or trust always? [r/t/a/? shows all options] (r): a
But as you can see, I make the new key sunday and only appear yesterday package rebuild also sunday. So could be slow mirror sync related too ?
I think the main difference is that you created a new key, not extended the validity of the old one. zypp might well see / understand that this is now a different key and has to ask you about the trus, but it seems to lack the knowledge that a key can change its lifetime... imho, still a bug that somebody should file (I sound broken, I know.... I probably mentioned that already a couple times in this thread). Cheers, Dominique
participants (7)
-
Adrian Schröter -
Andreas Schwab -
Andreas Stieger -
Bruno Friedmann -
Dominique Leuenberger / DimStar -
Marcus Meissner -
Olaf Hering