-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! I experience the same kind of problems with smart. First a question: For what purpose is /usr/lib/rpm/gnupg/pubring.gpg actually used? I thought, rpm's known pubkeys were kept in /var/lib/rpm/Pubkeys. And then some details / observations which might be helpful: 1) I got the problem when installing libnjb-2.2.5-0.pm.0.i586.rpm 2) rpm -Kvp gives /home/til/dl/libnjb-2.2.5-0.pm.0.i586.rpm: Header V3 DSA signature: NOKEY, key ID 1be4d89e Header SHA1 digest: OK (ed442fecc954084a7644577a74f93acdcbd78d90) MD5 digest: OK (f9f69bf7291d4e8256e88282db614702) V3 DSA signature: NOKEY, key ID 1be4d89e 3) Now the more interesting part: The attached keyfile contains the required GPG pubkey 1be4d89e, as can be checked: # gpg 1be4d89e.asc pub 1024D/1BE4D89E 2003-05-20 Herbert Graeber <herbert@links2linux.de> uid Herbert Graeber <herbert@graeber-clan.de> sub 1024g/49B40391 2003-05-20 If I import the attached key into rpm # rpm --import 1be4d89e.asc And then check, if it's installed, I get: # rpm -qi gpg-pubkey-1be4d89e package gpg-pubkey-1be4d89e is not installed But something was installed as I can check, when doing # rpm -qi gpg-pubkey | less and searching for "Graeber". I will find, that the very key was installed as "gpg-pubkey-dcb8fafe-3eca9611" # rpm -q gpg-pubkey-dcb8fafe gpg-pubkey-dcb8fafe-3eca9611 That it is actually the same key can be verified such: # rpm -qi gpg-pubkey-dcb8fafe | gpg pub 1024D/1BE4D89E 2003-05-20 Herbert Graeber <herbert@links2linux.de> uid Herbert Graeber <herbert@graeber-clan.de> sub 1024g/49B40391 2003-05-20 4) My question: Can this confusion of the naming be the cause of the problem? Or am I confusing something here? Is it related to the multiple uid's? # rpm -qi gpg-pubkey-dcb8fafe only contains this email address: Summary : gpg(Herbert Graeber <herbert@graeber-clan.de>) 5) I noticed, that smart (or one of its children) imports the given pubkey into "~root/.gnupg/pubring.gpg" instead of "/usr/lib/rpm/gnupg/pubring.gpg". Any hints or questions on details? Tilman -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFE6vJf9ZPu6Yae8lkRAiniAKCbgopqz25YbTyU1JcgnFh3bknV4wCghKvo UwG6zo1tHgXM0tYjT88yDow= =VQAs -----END PGP SIGNATURE----- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQGiBD7KldURBADfZd/z+on3ePLdc2G1W5EIT5fKR+XFz6PWqYcsrRoumlzIsu2O UjwZHEaD2lNmk1nMK68FqemLCYxDGvKiVBl315lIn0vcdUmhn5ZXKaehlOvfaJGA j/skhG/jdTU9yBF3pkHBqnY730L7DQWTB1MEighVRpwjX17GBAc5UhR4rwCg+8st XNRnvvxAihHhrzhn2zqZqf0EALRDRxoOlbjHnPxpXF6sdT05L6Z7cC47VY6hq7o7 fewMBcrGmHPXJJWt3lpiTe8ICsFbg++gpAxwCcoL1R73jxkaUakzLkbvtMXWV/WO V9rLxft+xze/pYhLZjyzBm2z+GV9F7Bg+QpkUxrf5/XxUnAntovgCeox7pY8i8fm ZCOVA/9px8ybcvW/Qk8fum3erPeKgzbPqx+LY7d/ZpNk8/xeboWdSxICeO1oS7B1 Ukm1uN5BfjRFmF5ljycFJ0rQhGRJNWw2+eftUCkhH+k6iYvCVy33zczL/BC4ikE6 5aRhEHWP+CAKe6WrmpxFWIOPegWNo2jNNm9XXxxFu8mbSMAOa7QoSGVyYmVydCBH cmFlYmVyIDxoZXJiZXJ0QGxpbmtzMmxpbnV4LmRlPohGBBARAgAGBQJALfpqAAoJ EFyrEUN/3O+L8JwAoPYzA8uy1HYbqaSpYvJp0sgGJbUMAJ0TD0Mq5hcxqslLeqto IGwMbWIf2YhGBBARAgAGBQJDSNrHAAoJEDiaVjzCcqEmoAgAnRLvgZnfedTQyKkC 4nApq+vMXOyaAJ9DLDqfwcuE1rEWYCZlP7zp9IFdM4hGBBARAgAGBQJDSRu4AAoJ EMXAxcchjRjXiPsAn3ulX4+jRd2jMiOIku14zdXrmLXPAJ0UO940uSkGlEMmGi6L vBanF4GNbIhGBBARAgAGBQJDSVfZAAoJENyH0Uo6ss5eET0AnAlK28Ax7dg0/f1+ jtMnca/mcKJ2AJ9IA3uzphLV+zljaOnZ0FmX/AJHRohGBBARAgAGBQJDTWzNAAoJ EIiDZsBSd6L6hpMAn14g8gLVHkaPQYZWibaGLH7wLMEIAKC+chhEyLiuj/hZ7utq X5y9NPYYn4hGBBMRAgAGBQI+ypYRAAoJED5bavbcuPr+DZsAn0eJ6VvODm8zCV52 RQux1LVskZxwAJ9OFyIu2IHHXwScuCrJIGwJjJT4p4hZBBMRAgAZBQI+ypXVBAsH AwIDFQIDAxYCAQIeAQIXgAAKCRBJ75ZPG+TYnkHaAJ0Y+0tCYJNXjtcRar4z5Eca s5NJuwCfX082lGuWvKpLFPEpWbvLDkq3nmu0KUhlcmJlcnQgR3JhZWJlciA8aGVy YmVydEBncmFlYmVyLWNsYW4uZGU+iEYEEBECAAYFAkNI2sUACgkQOJpWPMJyoSbd DgCeNj2Rx8DZGie4Jt+fgjr4LFAnfsYAni8GHqLSBh6qREvx9VNoYBDjGD6XiEYE EBECAAYFAkNJG64ACgkQxcDFxyGNGNeSnwCfb+ziab5S8zGnvckMitrvN1zZDvAA niA6VyxsPR9s8ZDwvuHR4DpVHyqDiEYEEBECAAYFAkNJV9EACgkQ3IfRSjqyzl5N CQCgj1LQlAn1aYg68D306OMDmOVDkAoAn17T3khY6Z/mJJwdNOnYfgTCdxU1iEYE EBECAAYFAkNNbMYACgkQiINmwFJ3ovrqJgCeK84E8ndlAkyKeoxfrp6K9Sfx4sQA nja8MHaN9rkuQWXVMsza7wG0/pXziGAEExECACAFAkNINd8CGyMGCwkIBwMCBBUC CAMEFgIDAQIeAQIXgAAKCRBJ75ZPG+TYnh+OAKDSDB+zZpDXpeBF5CLmsJkoXTP0 ZQCgmQLtGwl8gOuRH+fGROqOzS3/ilW5AQ0EPsqV1xAEAIr1MN6u8gBUbwKubLxX yyTBkjmNTwTXqqi7MP2THAQaenI1PC4AKDfN6tARH1TUFV2dKOTHpfDc6NGfo6tK Qz4fQAOgrG6hKrAfHU2gjkvgbb+4TgEgD/b5fibH4gsLg9yH7TRfOC/UCEtyJArP oC35Be8NA5mrgmuEfEw/hCFDAAMGA/4q1eHRilg1Ctrpte3LY2MQHNBr6n53Sj3H FwThqPTTiXRqmeHl7PBrrLo0XyuTRM90qeigeKw5lKRex16tgOdcjllZGcQaORi7 RwCcmazJZ0xxtIUGeEW7mkYERktVAT5BVt259LB6NsAWVnGFSY2hYLn2EYEW7dLj zt+EMwjO+YhGBBgRAgAGBQI+ypXXAAoJEEnvlk8b5NieLGMAnR8BHDurLah/rAP1 zPqpY+lwZMf+AJ9DhUPr2/XG4rYPEwtB8TbLhALbCw== =YWvf -----END PGP PUBLIC KEY BLOCK-----