| Summary: | /etc/RPM-GPG-KEYS are not Mageia's but belong in Mandriva only | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Dick Gevers <dvgevers> |
| Component: | RPM Packages | Assignee: | Mageia Bug Squad <bugsquad> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | Normal | CC: | cooker, dmorganec, mageia, misc, n3npq, thierry.vignaud, tmb |
| Version: | Cauldron | ||
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | 3final | ||
| Source RPM: | gnupg | CVE: | |
| Status comment: | |||
|
Description
Dick Gevers
2011-06-11 05:18:15 CEST
D Morgan
2011-06-11 08:37:18 CEST
CC:
(none) =>
dmorganec in the gnupg rpm this is in SOURCES/mdk-keys.tar.bz2 which should be changed. The following snippet should do the trick to regenerate the keys : for i in 41BCD9E7 DA10B483 80420F66; do gpg --recv $i ; gpg -a -o $i.asc --export $i ;done; I guess this warrant a update CC:
(none) =>
misc On the other hand, do we need to keep the directory ? What is it used for, with current rpm ? Status:
NEW =>
ASSIGNED In my idea Michael's snippet may not do the trick: last time I tried a gnupg key with exteral signatures did not import into rpm. After all, rpm may not even use the said keys from /etc, but IMHO they are supposed to be rpm-workable keys. Gnupg can strip everything external, or surely at Mageia there is a clean set of keys saved somewhere. But my attempts at importing keys into rpm date from 6 to 8 years ago, so what I say may no longer be true. If one want's to clean the key with gnupg: gpg --edit-key <keyid> followed by minimize, quit and --export... sorry, i need to give a keyserver, which one can i give ? gpg: no keyserver known (use option --keyserver) gpg: keyserver receive failed: bad URI Normally in ~/.gnupg/gpg.conf, but this should always work: --keyserver hkp://pgp.mit.edu:11371 The 'pubkey' file - if need be with added extension '.asc' - in the media_info directory of each repository is equal in content to the clean rpm-gpg-keys. e.g. mv pubkey pubkey.asc gpg --import pubkey.asc and observe stdout !
Thierry Vignaud
2011-10-04 17:48:08 CEST
Component:
Installer =>
RPM Packages Bug assigned to the package maintainer. Assignee:
bugsquad =>
boklm @boklm @dmorgan: Kindly review. IMHO this should be a release blocker for Mga2. Thanks! Hi, This bug was filed against cauldron, but we do not have cauldron at the moment. Please report whether this bug is still valid for Mageia 2. Thanks :) Cheers, marja Keywords:
(none) =>
NEEDINFO Still valid for 2 and Cauldron.
Sander Lepik
2012-05-28 12:49:24 CEST
Keywords:
NEEDINFO =>
(none) . Status:
ASSIGNED =>
NEW Still valid for beta3. Isn't is about time this was solved? It looks really bad on Mageia if we cannot fix this before final release ! Whiteboard:
MGA2TOO =>
3beta3
Johnny A. Solbu
2013-04-11 05:56:59 CEST
CC:
(none) =>
cooker Valid for 3RC. Almost 2 years old Summary:
/etc/RPM-GPG-KEYS are not Mageia's =>
/etc/RPM-GPG-KEYS are not Mageia's but belong in Mandriva only Valid for prerelease isos of Mageia 3 final Whiteboard:
3RC =>
3final
Sander Lepik
2013-05-11 23:42:48 CEST
CC:
(none) =>
thierry.vignaud, tmb Package updated in svn to remove /etc/RPM-GPG-KEYS. CC:
(none) =>
boklm And submitted to Mageia 3 by ennael. Status:
NEW =>
RESOLVED Nicolas: thanks for the fix. But for good order's sake: did you ascertain that the absence of the directory has no negative effects for anything like rpm building or other? I couldn't find anything using that directory. And since the directory had wrong keys since the begining of Mageia, we should have noticed if it broke something important. 'like the way u think.
Nicolas Vigier
2014-05-08 18:04:47 CEST
CC:
boklm =>
(none) |