https://bugzilla.novell.com/show_bug.cgi?id=694213 https://bugzilla.novell.com/show_bug.cgi?id=694213#c0 Summary: problems with one-click installation and keys of third-party repositories Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86 OS/Version: openSUSE 11.3 Status: NEW Severity: Normal Priority: P5 - None Component: libzypp AssignedTo: zypp-maintainers@forge.provo.novell.com ReportedBy: Ulrich.Windl@rz.uni-regensburg.de QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686; de; rv:1.9.1.19) Gecko/20110420 SUSE/2.0.14-0.2.1 SeaMonkey/2.0.14 When you want to have any multimedia experience in openSUSE 11.3, you need third-party repositories (as advised). Unfortunately this adds about as many problems as it solves: 1) Explanations says if you don't import a third-party key, you'll have to confirm packages individually. That's not true: No packages are installed unless you import the keys (because the repository cache isn't even built otherwise) 2) Having configured a repository where the key wasn't imported results in breaking the updateer applet (in GNOME): A warning about the untrusted key pops up, but security updates from the trusted source (i.e. Novell) are not advertised any more. Fortunately "yast online_update" still works with some interactive chat. Reproducible: Always Steps to Reproduce: 1. Install some multi-media packages from third party (like: Packman Repository, libdvdcss repository) as advertised, but don't import all keys Actual Results: The software installation experience severely degrades to little fun. Expected Results: Software installation experience should not be affected negatively. Example: # LANG= zypper refresh Retrieving repository 'Packman Repository' metadata [] New repository or package signing key received: Key ID: 45A1D0671ABD1AFB Key Name: PackMan Project (signing key) <packman@links2linux.de> Key Fingerprint: F8875B880D518B6B8C530D1345A1D0671ABD1AFB Key Created: Mon Sep 20 22:37:32 2010 Key Expires: Fri Sep 19 22:37:11 2014 Repository: Packman Repository Do you want to reject the key, trust temporarily, or trust always? [r/t/a/?] (r): -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.