-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2010-08-03 09:39, Marcus Meissner wrote:
On Tue, Aug 03, 2010 at 03:50:20AM +0200, Carlos E. R. wrote:
They are all obsolete.
Just a sample:
pub 1024D/BD6D129A 2008-01-22 [expired: 2010-04-01] uid Apache OBS Project <Apache@build.opensuse.org>
Needs to be extended by Apache project owner.
That was just a sample, I have been told that all repos are affected. And, AFAIK, there is no way to contact OBS maintainers.
pub 1024D/6B9D6523 2006-05-24 [expired: 2008-05-23] uid openSUSE Build Service <buildservice@opensuse.org>
Not really sure if this one is used anymore. Did you see it used by any repo? We use RSA keys in current setups to have the longer checksums.
I don't know, but it appeared in my key ring after importing keys from two repos. I was just testing to replicate what another person had said in the forum. So I think that yes, it is in use, but I don't remember where from. Ah, yes, it is in the download history of firefox: http://download.opensuse.org/repositories/GNOME:/STABLE:/2.30/openSUSE_11.3/... As I said, that just a sample, random, test. The claim is that all 11.3 repos are affected - which of course means all the repos the original reporter in the opensuse.org.help.applications forum tried to add.
pub 1024D/9C800ACA 2000-10-19 [expired: 2010-05-05] uid SuSE Package Signing Key <build@suse.de>
Was pushed out via suse-build-key/openSUSE-build-key updates, but not to the keyservers ... I did that now for all the ones.
Unfortunately, unless you did that very recently, not all keyservers have it. As I commented to Stephan a minute ago, wwwkeys.eu.pgp.net has it, but pgp.mit.edu and keyserver.pgp.com doesn't.
And yes, there is a bugzilla. No reply in several days.
If you reference a Bugzilla entry in a mail, please always state the bugzilla number, so no one has to ask for it.
That was a note so that nobody asked me to write a bugzilla >:-) Ok, it is "626876". - -- Cheers / Saludos, Carlos E. R. (from 11.2 x86_64 "Emerald" GM (Elessar)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAkxX3Q0ACgkQU92UU+smfQUf6ACgjCRuhvOhq6ftfhnIitKJDauh +CYAn32TodmtUS4qqBGbA3XRuqfDt7aG =BLpU -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org