[opensuse] Now even smart is boken :-(
Hi!
Just as we learned to use smart instead of YaST, now I'm getting these
problems with key signatures. I have no idea how to get stuff updated
anymore. I'm sure I barking at the wrong tree and I'm making people
angry here, but please try to leave the package management systems at
any stable configuration for at least 2 months, ok?
In the mean while, how do I get smart working again as it's giving me this:
Committing transaction...
warning: rpmts_HdrFromFdno: V3 DSA signature: NOKEY, key ID 5277a2fa
Trying to import the key 888366c05277a2fa from subkeys.pgp.net...
gpg: requesting key 5277A2FA from hkp server subkeys.pgp.net
gpg: key 5277A2FA: "Manfred Tremmel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HG wrote:
Just as we learned to use smart instead of YaST, now I'm getting these problems with key signatures. I have no idea how to get stuff updated anymore. I'm sure I barking at the wrong tree and I'm making people angry here, but please try to leave the package management systems at any stable configuration for at least 2 months, ok?
In the mean while, how do I get smart working again as it's giving me this: ... In short, it's now impossible to do upgrade with smart as it stops there.
Until that issue is solved (I guess it's a problem with the RPM that is
unsigned):
smart config --set rpm-check-signatures=False
That disables signature checking, at least as a temporary solution (puts
you back to smart's behavior before we enabled signature checking and
importing in smart RPMs for SUSE).
cheers
- --
-o) Pascal Bleser http://linux01.gwdg.de/~pbleser/
/\\
Hi, Pascal Bleser schrieb:
Until that issue is solved (I guess it's a problem with the RPM that is unsigned): smart config --set rpm-check-signatures=False
The package is signed. $ rpm -pKv libffmpeg0-0.4.9-7.pm.svn20060817.i686.rpm Header V3 DSA signature: OK, key ID 5277a2fa Header SHA1 digest: OK (9914a469c0c996e031d77133ca7a96239e879693) MD5 digest: OK (367f21b97e616cb2599ab7e409977419) V3 DSA signature: OK, key ID 5277a2fa HG just needs to import Manfred Tremmel's key and that's it. Basic rpm usage. Andreas Hanke --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hello!
On 8/20/06, Andreas Hanke
Hi,
Pascal Bleser schrieb:
Until that issue is solved (I guess it's a problem with the RPM that is unsigned): smart config --set rpm-check-signatures=False
I will try this what Pascal wrote. Thanks. (I know that signatures would be good, but I'm not sure if it really makes a difference. I mean, do we really check all the random keys? And if they are not all signed by some OpenSUSE kay, then we should... well we've been fine installing software before without signatures :-)
The package is signed. [...] HG just needs to import Manfred Tremmel's key and that's it. Basic rpm usage.
Andreas, if you did look at the output smart gave me... it says that I did in fact import the (Manfred Tremmel) key (it says "The above GPG key has been imported successfully.") I even answered that I want to trust it forever. Still it didn't work. Unless you can tell me what I did wrong (here are my smart commands: smart update; smart upgrade - did I have to do something else?), I consider this kind of stuff nonsense and getting boring. I will also check my GPG pubring that others said might have been broken by smart. Thanks again to all! -- HG. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
HG schrieb:
Andreas, if you did look at the output smart gave me... it says that I did in fact import the (Manfred Tremmel) key (it says "The above GPG key has been imported successfully.") I even answered that I want to trust it forever. Still it didn't work.
That's not what I asked for. I asked whether the key is _actually_ installed. Whether a key is _actually_ installed can be determined by looking at the output of rpm -qa | grep gpg-pubkey-$KEYID In this case rpm -qa | grep gpg-pubkey-5277a2fa
Unless you can tell me what I did wrong (here are my smart commands: smart update; smart upgrade - did I have to do something else?), I consider this kind of stuff nonsense and getting boring.
Having to ask for the same information multiple times is very frustrating :-( If you think that checking whether the key is _actually_ installed is boring nonsense, no problem, find someone who wants to fix the problem differently for you. If it's found out not to be installed, the next step would be an instruction how to import it manually so you can install all packages signed with key id 5277a2fa. Still boring nonsense? ;-)
I will also check my GPG pubring that others said might have been broken by smart.
Wait before doing that until someone explains what it means. At least the command that was posted in order to restore it does not sound quite right to me. There are no *.asc files by default in /usr/lib/rpm/gnupg and the command that was posted differs substantially from the way the initial pubring.gpg is created. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi!
I experience the same kind of problems with smart.
First a question: For what purpose is /usr/lib/rpm/gnupg/pubring.gpg
actually used? I thought, rpm's known pubkeys were kept in
/var/lib/rpm/Pubkeys.
And then some details / observations which might be helpful:
1) I got the problem when installing libnjb-2.2.5-0.pm.0.i586.rpm
2) rpm -Kvp gives
/home/til/dl/libnjb-2.2.5-0.pm.0.i586.rpm:
Header V3 DSA signature: NOKEY, key ID 1be4d89e
Header SHA1 digest: OK (ed442fecc954084a7644577a74f93acdcbd78d90)
MD5 digest: OK (f9f69bf7291d4e8256e88282db614702)
V3 DSA signature: NOKEY, key ID 1be4d89e
3) Now the more interesting part: The attached keyfile contains the
required GPG pubkey 1be4d89e, as can be checked:
# gpg 1be4d89e.asc
pub 1024D/1BE4D89E 2003-05-20 Herbert Graeber
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! No replies on my smart / rpm pubkey post? Am I completely off the right track? Just curious: Tilman -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFE7VxX9ZPu6Yae8lkRAiqfAJ98Jr3xwm48mcVWMcOS8+jyMBJmBACdHb0y TkddorJxqA9mzu1uRHuQrdQ= =BcB6 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hi, HG schrieb:
Just as we learned to use smart instead of YaST
This is nonsense and it's getting boring.
I have no idea how to get stuff updated anymore.
That's an easy one, import the GPG key.
In short, it's now impossible to do upgrade with smart as it stops there.
No it is not. There is a problem importing the GPG key. First, check whether the key is installed: rpm -q gpg-pubkey-5277a2fa-* I guess that it is not. So you need to import the key - but please post the output of the above command first. Andreas Hanke --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
hi, smart broke your /usr/lib/rpm/gnupg/pubring.gpg* delete the 2 files. then run: for i in /usr/lib/rpm/gnupg/*.asc ; do rpm --import $i ; done hope that helps darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Sun, 20 Aug 2006, Marcus Rueckert wrote:
smart broke your /usr/lib/rpm/gnupg/pubring.gpg*
delete the 2 files.
--verbose please! Regards Christoph --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (6)
-
Andreas Hanke -
Christoph Thiel -
HG -
Marcus Rueckert -
Pascal Bleser -
Tilman Vogel