[opensuse-xfce] X11:xfce.obs - The gpg key signing file 'repomd.xml' will expire in 13 days.
Hi there,
just as an FYI: I just ran "zypper ref" and got the following:
The gpg key signing file 'repomd.xml' will expire in 13 days. Repository: X11:xfce.obs Key Name: X11 OBS Project X11@build.opensuse.org Key Fingerprint: B1DA68DE 51949E7B 034237C4 BB1AF233 0F2672C8 Key Created: Wed May 24 00:13:55 2017 Key Expires: Fri Aug 2 00:13:55 2019 (expires in 13 days)
Perhaps someone from the maintainers can extend the key.
TIA, cheers.
l8er manfred
On 7/19/19 4:37 PM, Manfred Hollstein wrote:
Hi there,
just as an FYI: I just ran "zypper ref" and got the following:
The gpg key signing file 'repomd.xml' will expire in 13 days. Repository: X11:xfce.obs Key Name: X11 OBS Project X11@build.opensuse.org Key Fingerprint: B1DA68DE 51949E7B 034237C4 BB1AF233 0F2672C8 Key Created: Wed May 24 00:13:55 2017 Key Expires: Fri Aug 2 00:13:55 2019 (expires in 13 days)
Perhaps someone from the maintainers can extend the key.
TIA, cheers.
l8er manfred
Hi Manfred, On OBS the key does not expire till 2021 [1]. I am not sure what to do.
[1] https://build.opensuse.org/project/show/X11:xfce
Hi Maurizio,
On Fri, 19 Jul 2019, 11:51:29 +0200, Maurizio Galli (MauG) wrote:
On 7/19/19 4:37 PM, Manfred Hollstein wrote:
Hi there,
just as an FYI: I just ran "zypper ref" and got the following:
The gpg key signing file 'repomd.xml' will expire in 13 days. Repository: X11:xfce.obs Key Name: X11 OBS Project X11@build.opensuse.org Key Fingerprint: B1DA68DE 51949E7B 034237C4 BB1AF233 0F2672C8 Key Created: Wed May 24 00:13:55 2017 Key Expires: Fri Aug 2 00:13:55 2019 (expires in 13 days)
Perhaps someone from the maintainers can extend the key.
TIA, cheers.
l8er manfred
Hi Manfred, On OBS the key does not expire till 2021 [1].
strange...
I am not sure what to do.
Dunno either. Perhaps someone has extended the key in the meantime (but I doubt due to it being valid until _September_ 2021!). It's most likely caused by the key details ("1024" size and "dsa" algorithm), which appear to make a new key necessary; "dsa" isn't really supported within the GPG infrastructure anymore (I had to learn this with my key quite some time ago...).
Maurizio Galli (MauG)
Cheers.
l8er manfred
Am 19.07.19 um 14:21 schrieb Manfred Hollstein:
Hi Maurizio,
On Fri, 19 Jul 2019, 11:51:29 +0200, Maurizio Galli (MauG) wrote:
On 7/19/19 4:37 PM, Manfred Hollstein wrote:
Hi there,
just as an FYI: I just ran "zypper ref" and got the following:
The gpg key signing file 'repomd.xml' will expire in 13 days. Repository: X11:xfce.obs Key Name: X11 OBS Project X11@build.opensuse.org Key Fingerprint: B1DA68DE 51949E7B 034237C4 BB1AF233 0F2672C8 Key Created: Wed May 24 00:13:55 2017 Key Expires: Fri Aug 2 00:13:55 2019 (expires in 13 days)
Perhaps someone from the maintainers can extend the key.
TIA, cheers.
l8er manfred
Hi Manfred, On OBS the key does not expire till 2021 [1].
strange...
I am not sure what to do.
Dunno either. Perhaps someone has extended the key in the meantime (but I doubt due to it being valid until _September_ 2021!).
Totally likely.
seife@vbox:~/open-build-service> git grep keyexpiry|cat src/backend/BSSrcServer/Signkey.pm:my $keyexpiry = 800; src/backend/BSSrcServer/Signkey.pm: my @keyargs = ($keyalgo, $keyexpiry); src/backend/BSSrcServer/Signkey.pm: my @keyargs = ($keyexpiry); seife@vbox:~/open-build-service> date --date +800days So 26. Sep 14:28:37 CEST 2021
:-)
So once the mirrors have caught up, you'll probably get the new extended key and everything will be fine.
Hi Manfred,
Thanks for the heads up, such things go unnoticed too easily ;-)
Am 19.07.19 um 10:37 schrieb Manfred Hollstein:
Hi there,
just as an FYI: I just ran "zypper ref" and got the following:
The gpg key signing file 'repomd.xml' will expire in 13 days. Repository: X11:xfce.obs Key Name: X11 OBS Project X11@build.opensuse.org Key Fingerprint: B1DA68DE 51949E7B 034237C4 BB1AF233 0F2672C8 Key Created: Wed May 24 00:13:55 2017 Key Expires: Fri Aug 2 00:13:55 2019 (expires in 13 days)
Perhaps someone from the maintainers can extend the key.
If Maurizio is right (and I have no reason to doubt that ;-)), then this might be a zypp issue. ISTR that I had similar problems with my own testing projects years ago. The extended key was just not re-downloaded by zypper.
I'm not sure anymore if a "zypper ref -f" fixed it or if I did remove and re-add the repo to have the key updated. I think it was one of these two, so you might try both :-)
OTOH I have not seen such issues for quite some time, and I have a lot of repositories, so I always thought that this possible libzypp issue was solved nowadays and the key was updated automatically...
Have fun,
-
Manfred Hollstein -
Maurizio Galli (MauG) -
Stefan Seyfried