[opensuse] Now even smart is boken :-(
Hi! Just as we learned to use smart instead of YaST, now I'm getting these problems with key signatures. I have no idea how to get stuff updated anymore. I'm sure I barking at the wrong tree and I'm making people angry here, but please try to leave the package management systems at any stable configuration for at least 2 months, ok? In the mean while, how do I get smart working again as it's giving me this: Committing transaction... warning: rpmts_HdrFromFdno: V3 DSA signature: NOKEY, key ID 5277a2fa Trying to import the key 888366c05277a2fa from subkeys.pgp.net... gpg: requesting key 5277A2FA from hkp server subkeys.pgp.net gpg: key 5277A2FA: "Manfred Tremmel <Manfred.Tremmel@iiv.de>" not changed gpg: Total number processed: 1 gpg: unchanged: 1 The above GPG key has been imported successfully. It is required to install this package: libffmpeg0-0.4.9-7.pm.svn20060817.i686.rpm Do you want to trust this key forever? You must verify the below fingerprint before answering. pub 1024D/5277A2FA 1999-07-26 [expires: ????-??-??] Key fingerprint = 5296 01E5 5911 A1DC 93D4 45D5 8883 66C0 5277 A2FA uid Manfred Tremmel <Manfred.Tremmel@iiv.de> sub 3072g/81D6CA10 1999-07-26 If you answer "Yes" all other packages signed with this key will be installed automatically. (y/N): Y error: libffmpeg0-0.4.9-7.pm.svn20060817.i686.rpm: public key not available In short, it's now impossible to do upgrade with smart as it stops there. -- HG. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HG wrote:
Just as we learned to use smart instead of YaST, now I'm getting these problems with key signatures. I have no idea how to get stuff updated anymore. I'm sure I barking at the wrong tree and I'm making people angry here, but please try to leave the package management systems at any stable configuration for at least 2 months, ok?
In the mean while, how do I get smart working again as it's giving me this: ... In short, it's now impossible to do upgrade with smart as it stops there.
Until that issue is solved (I guess it's a problem with the RPM that is unsigned): smart config --set rpm-check-signatures=False That disables signature checking, at least as a temporary solution (puts you back to smart's behavior before we enabled signature checking and importing in smart RPMs for SUSE). cheers - -- -o) Pascal Bleser http://linux01.gwdg.de/~pbleser/ /\\ <pascal.bleser@skynet.be> <guru@unixtech.be> _\_v The more things change, the more they stay insane. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFE6KrRr3NMWliFcXcRAhX3AJ9GCSzLGlxmECV93WLgKuhrci61DgCeIKND m7WsFyn6MqPsD2KdRSJGrkc= =jQH5 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hi, Pascal Bleser schrieb:
Until that issue is solved (I guess it's a problem with the RPM that is unsigned): smart config --set rpm-check-signatures=False
The package is signed. $ rpm -pKv libffmpeg0-0.4.9-7.pm.svn20060817.i686.rpm Header V3 DSA signature: OK, key ID 5277a2fa Header SHA1 digest: OK (9914a469c0c996e031d77133ca7a96239e879693) MD5 digest: OK (367f21b97e616cb2599ab7e409977419) V3 DSA signature: OK, key ID 5277a2fa HG just needs to import Manfred Tremmel's key and that's it. Basic rpm usage. Andreas Hanke --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hello! On 8/20/06, Andreas Hanke <andreas.hanke@gmx-topmail.de> wrote:
Hi,
Pascal Bleser schrieb:
Until that issue is solved (I guess it's a problem with the RPM that is unsigned): smart config --set rpm-check-signatures=False
I will try this what Pascal wrote. Thanks. (I know that signatures would be good, but I'm not sure if it really makes a difference. I mean, do we really check all the random keys? And if they are not all signed by some OpenSUSE kay, then we should... well we've been fine installing software before without signatures :-)
The package is signed. [...] HG just needs to import Manfred Tremmel's key and that's it. Basic rpm usage.
Andreas, if you did look at the output smart gave me... it says that I did in fact import the (Manfred Tremmel) key (it says "The above GPG key has been imported successfully.") I even answered that I want to trust it forever. Still it didn't work. Unless you can tell me what I did wrong (here are my smart commands: smart update; smart upgrade - did I have to do something else?), I consider this kind of stuff nonsense and getting boring. I will also check my GPG pubring that others said might have been broken by smart. Thanks again to all! -- HG. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
HG schrieb:
Andreas, if you did look at the output smart gave me... it says that I did in fact import the (Manfred Tremmel) key (it says "The above GPG key has been imported successfully.") I even answered that I want to trust it forever. Still it didn't work.
That's not what I asked for. I asked whether the key is _actually_ installed. Whether a key is _actually_ installed can be determined by looking at the output of rpm -qa | grep gpg-pubkey-$KEYID In this case rpm -qa | grep gpg-pubkey-5277a2fa
Unless you can tell me what I did wrong (here are my smart commands: smart update; smart upgrade - did I have to do something else?), I consider this kind of stuff nonsense and getting boring.
Having to ask for the same information multiple times is very frustrating :-( If you think that checking whether the key is _actually_ installed is boring nonsense, no problem, find someone who wants to fix the problem differently for you. If it's found out not to be installed, the next step would be an instruction how to import it manually so you can install all packages signed with key id 5277a2fa. Still boring nonsense? ;-)
I will also check my GPG pubring that others said might have been broken by smart.
Wait before doing that until someone explains what it means. At least the command that was posted in order to restore it does not sound quite right to me. There are no *.asc files by default in /usr/lib/rpm/gnupg and the command that was posted differs substantially from the way the initial pubring.gpg is created. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! I experience the same kind of problems with smart. First a question: For what purpose is /usr/lib/rpm/gnupg/pubring.gpg actually used? I thought, rpm's known pubkeys were kept in /var/lib/rpm/Pubkeys. And then some details / observations which might be helpful: 1) I got the problem when installing libnjb-2.2.5-0.pm.0.i586.rpm 2) rpm -Kvp gives /home/til/dl/libnjb-2.2.5-0.pm.0.i586.rpm: Header V3 DSA signature: NOKEY, key ID 1be4d89e Header SHA1 digest: OK (ed442fecc954084a7644577a74f93acdcbd78d90) MD5 digest: OK (f9f69bf7291d4e8256e88282db614702) V3 DSA signature: NOKEY, key ID 1be4d89e 3) Now the more interesting part: The attached keyfile contains the required GPG pubkey 1be4d89e, as can be checked: # gpg 1be4d89e.asc pub 1024D/1BE4D89E 2003-05-20 Herbert Graeber <herbert@links2linux.de> uid Herbert Graeber <herbert@graeber-clan.de> sub 1024g/49B40391 2003-05-20 If I import the attached key into rpm # rpm --import 1be4d89e.asc And then check, if it's installed, I get: # rpm -qi gpg-pubkey-1be4d89e package gpg-pubkey-1be4d89e is not installed But something was installed as I can check, when doing # rpm -qi gpg-pubkey | less and searching for "Graeber". I will find, that the very key was installed as "gpg-pubkey-dcb8fafe-3eca9611" # rpm -q gpg-pubkey-dcb8fafe gpg-pubkey-dcb8fafe-3eca9611 That it is actually the same key can be verified such: # rpm -qi gpg-pubkey-dcb8fafe | gpg pub 1024D/1BE4D89E 2003-05-20 Herbert Graeber <herbert@links2linux.de> uid Herbert Graeber <herbert@graeber-clan.de> sub 1024g/49B40391 2003-05-20 4) My question: Can this confusion of the naming be the cause of the problem? Or am I confusing something here? Is it related to the multiple uid's? # rpm -qi gpg-pubkey-dcb8fafe only contains this email address: Summary : gpg(Herbert Graeber <herbert@graeber-clan.de>) 5) I noticed, that smart (or one of its children) imports the given pubkey into "~root/.gnupg/pubring.gpg" instead of "/usr/lib/rpm/gnupg/pubring.gpg". Any hints or questions on details? Tilman -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFE6vJf9ZPu6Yae8lkRAiniAKCbgopqz25YbTyU1JcgnFh3bknV4wCghKvo UwG6zo1tHgXM0tYjT88yDow= =VQAs -----END PGP SIGNATURE----- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQGiBD7KldURBADfZd/z+on3ePLdc2G1W5EIT5fKR+XFz6PWqYcsrRoumlzIsu2O UjwZHEaD2lNmk1nMK68FqemLCYxDGvKiVBl315lIn0vcdUmhn5ZXKaehlOvfaJGA j/skhG/jdTU9yBF3pkHBqnY730L7DQWTB1MEighVRpwjX17GBAc5UhR4rwCg+8st XNRnvvxAihHhrzhn2zqZqf0EALRDRxoOlbjHnPxpXF6sdT05L6Z7cC47VY6hq7o7 fewMBcrGmHPXJJWt3lpiTe8ICsFbg++gpAxwCcoL1R73jxkaUakzLkbvtMXWV/WO V9rLxft+xze/pYhLZjyzBm2z+GV9F7Bg+QpkUxrf5/XxUnAntovgCeox7pY8i8fm ZCOVA/9px8ybcvW/Qk8fum3erPeKgzbPqx+LY7d/ZpNk8/xeboWdSxICeO1oS7B1 Ukm1uN5BfjRFmF5ljycFJ0rQhGRJNWw2+eftUCkhH+k6iYvCVy33zczL/BC4ikE6 5aRhEHWP+CAKe6WrmpxFWIOPegWNo2jNNm9XXxxFu8mbSMAOa7QoSGVyYmVydCBH cmFlYmVyIDxoZXJiZXJ0QGxpbmtzMmxpbnV4LmRlPohGBBARAgAGBQJALfpqAAoJ EFyrEUN/3O+L8JwAoPYzA8uy1HYbqaSpYvJp0sgGJbUMAJ0TD0Mq5hcxqslLeqto IGwMbWIf2YhGBBARAgAGBQJDSNrHAAoJEDiaVjzCcqEmoAgAnRLvgZnfedTQyKkC 4nApq+vMXOyaAJ9DLDqfwcuE1rEWYCZlP7zp9IFdM4hGBBARAgAGBQJDSRu4AAoJ EMXAxcchjRjXiPsAn3ulX4+jRd2jMiOIku14zdXrmLXPAJ0UO940uSkGlEMmGi6L vBanF4GNbIhGBBARAgAGBQJDSVfZAAoJENyH0Uo6ss5eET0AnAlK28Ax7dg0/f1+ jtMnca/mcKJ2AJ9IA3uzphLV+zljaOnZ0FmX/AJHRohGBBARAgAGBQJDTWzNAAoJ EIiDZsBSd6L6hpMAn14g8gLVHkaPQYZWibaGLH7wLMEIAKC+chhEyLiuj/hZ7utq X5y9NPYYn4hGBBMRAgAGBQI+ypYRAAoJED5bavbcuPr+DZsAn0eJ6VvODm8zCV52 RQux1LVskZxwAJ9OFyIu2IHHXwScuCrJIGwJjJT4p4hZBBMRAgAZBQI+ypXVBAsH AwIDFQIDAxYCAQIeAQIXgAAKCRBJ75ZPG+TYnkHaAJ0Y+0tCYJNXjtcRar4z5Eca s5NJuwCfX082lGuWvKpLFPEpWbvLDkq3nmu0KUhlcmJlcnQgR3JhZWJlciA8aGVy YmVydEBncmFlYmVyLWNsYW4uZGU+iEYEEBECAAYFAkNI2sUACgkQOJpWPMJyoSbd DgCeNj2Rx8DZGie4Jt+fgjr4LFAnfsYAni8GHqLSBh6qREvx9VNoYBDjGD6XiEYE EBECAAYFAkNJG64ACgkQxcDFxyGNGNeSnwCfb+ziab5S8zGnvckMitrvN1zZDvAA niA6VyxsPR9s8ZDwvuHR4DpVHyqDiEYEEBECAAYFAkNJV9EACgkQ3IfRSjqyzl5N CQCgj1LQlAn1aYg68D306OMDmOVDkAoAn17T3khY6Z/mJJwdNOnYfgTCdxU1iEYE EBECAAYFAkNNbMYACgkQiINmwFJ3ovrqJgCeK84E8ndlAkyKeoxfrp6K9Sfx4sQA nja8MHaN9rkuQWXVMsza7wG0/pXziGAEExECACAFAkNINd8CGyMGCwkIBwMCBBUC CAMEFgIDAQIeAQIXgAAKCRBJ75ZPG+TYnh+OAKDSDB+zZpDXpeBF5CLmsJkoXTP0 ZQCgmQLtGwl8gOuRH+fGROqOzS3/ilW5AQ0EPsqV1xAEAIr1MN6u8gBUbwKubLxX yyTBkjmNTwTXqqi7MP2THAQaenI1PC4AKDfN6tARH1TUFV2dKOTHpfDc6NGfo6tK Qz4fQAOgrG6hKrAfHU2gjkvgbb+4TgEgD/b5fibH4gsLg9yH7TRfOC/UCEtyJArP oC35Be8NA5mrgmuEfEw/hCFDAAMGA/4q1eHRilg1Ctrpte3LY2MQHNBr6n53Sj3H FwThqPTTiXRqmeHl7PBrrLo0XyuTRM90qeigeKw5lKRex16tgOdcjllZGcQaORi7 RwCcmazJZ0xxtIUGeEW7mkYERktVAT5BVt259LB6NsAWVnGFSY2hYLn2EYEW7dLj zt+EMwjO+YhGBBgRAgAGBQI+ypXXAAoJEEnvlk8b5NieLGMAnR8BHDurLah/rAP1 zPqpY+lwZMf+AJ9DhUPr2/XG4rYPEwtB8TbLhALbCw== =YWvf -----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! No replies on my smart / rpm pubkey post? Am I completely off the right track? Just curious: Tilman -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFE7VxX9ZPu6Yae8lkRAiqfAJ98Jr3xwm48mcVWMcOS8+jyMBJmBACdHb0y TkddorJxqA9mzu1uRHuQrdQ= =BcB6 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hi, HG schrieb:
Just as we learned to use smart instead of YaST
This is nonsense and it's getting boring.
I have no idea how to get stuff updated anymore.
That's an easy one, import the GPG key.
In short, it's now impossible to do upgrade with smart as it stops there.
No it is not. There is a problem importing the GPG key. First, check whether the key is installed: rpm -q gpg-pubkey-5277a2fa-* I guess that it is not. So you need to import the key - but please post the output of the above command first. Andreas Hanke --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
hi, smart broke your /usr/lib/rpm/gnupg/pubring.gpg* delete the 2 files. then run: for i in /usr/lib/rpm/gnupg/*.asc ; do rpm --import $i ; done hope that helps darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Sun, 20 Aug 2006, Marcus Rueckert wrote:
smart broke your /usr/lib/rpm/gnupg/pubring.gpg*
delete the 2 files.
--verbose please! Regards Christoph --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (6)
-
Andreas Hanke -
Christoph Thiel -
HG -
Marcus Rueckert -
Pascal Bleser -
Tilman Vogel