Zypp Development

Download

zypp-devel@lists.opensuse.org

November 2016

1 participants
2 discussions

[zypp-devel] "Checking for file conflicts" - slower than it used to be?
by Adam Spiers 24 Apr '17

24 Apr '17

Is it just me or does the "Checking for file conflicts" stage of a zypper install sometimes take a lot longer than it used to? My memory is that it always used to be extremely fast, whereas now it can take tens of seconds in some cases, or even minutes. It seems very strange to me that it would ever need to take more than a fraction of a second. Is there a good reason for this? -- To unsubscribe, e-mail: zypp-devel+unsubscribe(a)opensuse.org To contact the owner, e-mail: zypp-devel+owner(a)opensuse.org

3 5

[zypp-devel] GPG signed rpm-md repositories with subkeys?
by Joe Damato 03 Nov '16

03 Nov '16

Greetings: I was confused earlier today when trying to add a GPG-signed rpm-md type repository to my system. I noticed that zypper was listing the repository as not being signed. zypper refresh was telling me that the repository was signed with an unknown key and zypper lr was listing the repository as not supporting repo_gpgcheck. After some digging around the libzypper source (14.43.0) on my system (openSUSE 13.2) I believe I've tracked down the issue. The call to publicKeyExists in KeyRing::Impl::verifyFileSignatureWorkflow checks if the repomd.xml.asc signature's key ID is known. If the repomd.xml.asc was signed with a subkey of a GPG key (instead of a primary key), this check will fail even though the call to VerifyFile would succeed. Is this a known issue? Not sure what the best solution is for zypper, but one potential solution would be to simply ask GPG to verify the signature using the general keyring without first checking if a matching key id is in the keyring. The logic in verifyFileSignatureWorkflow can then be simplified as GPG would figure out if there's a matching key and this issue would be avoided. Thanks, Joe -- To unsubscribe, e-mail: zypp-devel+unsubscribe(a)opensuse.org To contact the owner, e-mail: zypp-devel+owner(a)opensuse.org

2 1