Mailinglist Archive: opensuse-buildservice (314 mails)

< Previous Next >
Re: [opensuse-buildservice] Keys created for all top level projects
  • From: "Dr. Peter Poeml" <poeml@xxxxxxx>
  • Date: Tue, 22 Jan 2008 21:11:30 +0100
  • Message-id: <20080122201129.GX8989@xxxxxxx>
On Tue, Jan 22, 2008 at 06:17:54PM +0100, Manfred Hollstein wrote:
On Tue, 22 Jan 2008, 13:02:47 +0100, Adrian Schröter wrote:
On Tuesday 22 January 2008 12:45:54 wrote Michael Schroeder:
Hi build service users,

all top-level projects (e.g. KDE, home:<user>,...) now have
their own sign key. Projects further down the hierarchy inherit
the sign key.

We'll add some key management functions to the API soon.

This change will lead to popups for the user to trust the new key. YaST and
zypper do handle this nicely as far as we tested.

Will these new keys be made publicly available/known to GPG key servers?
This would be needed for some other package management tools (like
apt-get). Right now, I cannot install the new packages from the
mozilla/openSUSE-10.2 repository any more :-( Yes, I have run the
command

rpm --import
http://download.opensuse.org/repositories/mozilla/openSUSE_10.2/repodata/repomd.xml.key

but checking the sigs still complains:

rpm -qp /var/cache/apt/archives/mozilla-xulrunner181_1.8.1.11-2.2_i586.rpm
-K
/var/cache/apt/archives/mozilla-xulrunner181_1.8.1.11-2.2_i586.rpm: (SHA1)
DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#06213bd4)

yum has the same problem as you:

Public key for eddie-tool-0.35r881-6.1.i586.rpm is not installed
Retrieving GPG key from
http://download.opensuse.org/repositories/home:/poeml/SuSE_Linux_10.1/repodata/repomd.xml.key
Importing GPG key 0xA1BFE509 "home:poeml OBS Project
<home:poeml@xxxxxxxxxxxxxxxxxx>"
Is this ok [y/N]: y
Key imported successfully
Import of key(s) didn't help, wrong key(s)?


And on next try:

warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID a1bfe509
Public key for eddie-tool-0.35r881-6.1.i586.rpm is not installed
Retrieving GPG key from
http://download.opensuse.org/repositories/home:/poeml/SuSE_Linux_10.1/repodata/repomd.xml.key
GPG key at
http://download.opensuse.org/repositories/home:/poeml/SuSE_Linux_10.1/repodata/repomd.xml.key
(0xA1BFE509) is already installed


The GPG keys listed for the "Project of Peter Poeml (SuSE_Linux_10.1)"
repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.


Peter
--
"WARNING: This bug is visible to non-employees. Please be respectful!"

SUSE LINUX Products GmbH
Research & Development
< Previous Next >
Follow Ups