Mailinglist Archive: opensuse-buildservice (137 mails)

< Previous Next >
Re: [opensuse-buildservice] Key change for openSUSE:Tools?
Thanks for the help. It appears that the repomd.xml.asc file on is different from
(though repomd.xml and repomd.xml.key are correct):

diff -u
---    2011-12-15
08:12:21.000000000 -0600
+++    2011-09-02
07:26:55.000000000 -0500
@@ -1,7 +1,7 @@
 Version: GnuPG v1.0.7 (GNU/Linux)


Can someone investigate this? This has been the situation for about
three days now.

This is difficult for us because in my location I always get this same mirror:

HTTP/1.1 302 Found
Date: Thu, 15 Dec 2011 15:16:07 GMT
Server: Apache/2.2.12 (Linux/SUSE)
X-AS: 3595
X-MirrorBrain-Realm: country
Cache-Control: max-age=0
Expires: Thu, 15 Dec 2011 15:16:07 GMT
Content-Length: 374
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1


On Thu, Dec 15, 2011 at 1:52 AM, Adrian Schröter <adrian@xxxxxxx> wrote:

Am Mittwoch, 14. Dezember 2011, 11:05:56 schrieb Archie Cobbs:
I'm suddenly seeing the error below.

Did the key for openSUSE:Tools change?

The last time in July 2010. But only extended at that point of time.

I just resubscribed to this list so my apologies if there was some
announcement (I didn't see anything to that effect in the archives).

$ zypper -vvvvv ref openSUSE_Tools
Verbosity: 5
Non-option program arguments: 'openSUSE_Tools'
Initializing Target
Specified repositories: openSUSE_Tools
Checking whether to refresh metadata for tools (openSUSE_11.3)
odata/repomd.xml.asc [done]
odata/repomd.xml.key [done]
odata/repomd.xml [done]
Signature verification failed for file 'repomd.xml' from repository
' tools (openSUSE_11.3)'.

I do not see anything broken here atm. But you may got data from a broken (or
even evil) mirror. You can check in zypp.log from where.


Warning: This might be caused by a malicious change in the file!
Continuing might be risky. Continue anyway? [yes/no] (no):

Adrian Schroeter
SUSE Linux Products GmbH
email: adrian@xxxxxxx

Archie L. Cobbs
To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-buildservice+owner@xxxxxxxxxxxx

< Previous Next >