Bug 24709

Summary:	urpmi rsyslog fail (gpg key problem)
Product:	Mageia	Reporter:	eric gerbier <eric.gerbier>
Component:	RPM Packages	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED INVALID	QA Contact:
Severity:	normal
Priority:	Normal	CC:	geiger.david68210
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	rsyslog-8.40.0-3.mga7.src.rpm	CVE:
Status comment:

Description eric gerbier 2019-04-24 11:38:33 CEST

Description of problem:
on mageia cauldron beta 3( fresh install), we have problems to install some packages, for example : rsyslog

# urpmi --auto  rsyslog


The following packages have bad signatures:
/var/cache/urpmi/rpms/lib64estr0-0.1.11-1.mga7.x86_64.rpm: Medium without key (OK (RSA/SHA256, Sat Dec 29 03:09:56 2018, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64fastjson4-0.99.8-4.mga7.x86_64.rpm: Medium without key (OK (RSA/SHA256, Thu Sep 27 02:50:08 2018, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/rsyslog-8.40.0-3.mga7.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed Jan 23 18:52:49 2019, Key ID b742fa8b80420f66))


Version-Release number of selected component (if applicable):
rsyslog-8.40.0-3.mga7 (for example)

How reproducible:


Steps to Reproduce:
1. urpmi.update -a
2. urpmi --auto rsyslog
3.

the mageia gpg key is imported :

# rpm -qi gpg-pubkey 
Name        : gpg-pubkey
Version     : 80420f66
Release     : 4d4fe123
Architecture: (none)
Install Date: Tue Apr 23 08:55:30 2019
Group       : Public Keys
Size        : 0
License     : pubkey
Signature   : (none)
Source RPM  : (none)
Build Date  : Mon Feb  7 13:10:11 2011
Build Host  : localhost
Relocations : (not relocatable)
Packager    : Mageia Packages <packages@mageia.org>
Summary     : gpg(Mageia Packages <packages@mageia.org>)
Description :
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.2.1 (NSS-3)
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=5bqr
-----END PGP PUBLIC KEY BLOCK-----


the rpm package seems to be signed :

# rpm -Kv /var/cache/urpmi/rpms/rsyslog-8.40.0-3.mga7.x86_64.rpm
/var/cache/urpmi/rpms/rsyslog-8.40.0-3.mga7.x86_64.rpm:
    Header V4 RSA/SHA256 Signature, key ID 80420f66: OK
    Header SHA256 digest: OK
    Header SHA1 digest: OK
    Payload SHA256 digest: OK
    V4 RSA/SHA256 Signature, key ID 80420f66: OK
    MD5 digest: OK

and installation is possible with rpm tool

# rpm -Uvh /var/cache/urpmi/rpms/rsyslog-8.40.0-3.mga7.x86_64.rpm
Verifying...                          ################################# [100%]
Preparing...                          ################################# [100%]
Updating / installing...
   1:rsyslog-8.40.0-3.mga7            ################################# [100%]
switching on syslog forwarding in: /etc/systemd/journald.conf

Comment 1 David GEIGER 2019-04-24 16:46:26 CEST

Let's see if a rebuild fixes this issue with:

rsyslog-8.40.0-4.mga7

CC: (none) => geiger.david68210

Comment 2 eric gerbier 2019-04-25 11:07:16 CEST

we had some others tests today

a test with dnf ( dnf install rsyslog ) works

then we have changed the urpmi repository to mageia officials repositories : it works too.

because we have hundreds of computers in our networks, we have our own local mageia repositories. The problem seems to come from our sync , the media_info was probably in a bad state.

sorry for this bad bug report

Comment 3 David GEIGER 2019-04-25 17:08:42 CEST

So closing!

Status: NEW => RESOLVED
Resolution: (none) => INVALID

Morgan Leijström 2020-10-13 20:00:40 CEST

See Also: (none) => https://bugs.mageia.org/show_bug.cgi?id=27372

Morgan Leijström 2020-10-13 20:01:29 CEST

See Also: https://bugs.mageia.org/show_bug.cgi?id=27372 => (none)