11:18 a.m.
After
rpm -ivh
http://download1.rpmfusion.org/free/fedora/development/x86_64/os/rpmfusio...
there is a problem installing some packages from RPM Fusion. For example:
# yum install a52dec
[...]
---> Package a52dec.x86_64 0:0.7.4-15.fc11 will be installed
[...]
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID 00a4d52b: NOKEY
Public key for a52dec-0.7.4-15.fc11.x86_64.rpm is not installed
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-16-x86_64
Importing GPG key 0xADF25D9C:
Userid : RPM Fusion free repository for Fedora (16)
<rpmfusion-buildsys(a)lists.rpmfusion.org>
Package: rpmfusion-free-release-16-1.noarch (installed)
From : /etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-16-x86_64
Is this ok [y/N]: y
Public key for a52dec-0.7.4-15.fc11.x86_64.rpm is not installed
Repeating the installation attempt gives these details:
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-16-x86_64
The GPG keys listed for the "RPM Fusion for Fedora 16 - Free" repository are
already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.
Is it because the old package needs to be signed with a newer key?
Or is it a problem in the rpmfusion-free-release-16-1.noarch package's
rpmfusion-free-rawhide.repo file?
| gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-latest-$basearch
file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-rawhide-$basearch
$ ll RPM-GPG-KEY-rpmfusion-free-fedora-latest-*
lrwxrwxrwx. 1 root root 44 Nov 2 12:08 RPM-GPG-KEY-rpmfusion-free-fedora-latest-i386
-> RPM-GPG-KEY-rpmfusion-free-fedora-16-primary
lrwxrwxrwx. 1 root root 44 Nov 2 12:08 RPM-GPG-KEY-rpmfusion-free-fedora-latest-x86_64
-> RPM-GPG-KEY-rpmfusion-free-fedora-16-primary
There's a broken link, too (albeit unrelated) and reported:
lrwxrwxrwx. 1 root root 11 Nov 2 12:08 RPM-GPG-KEY-rpmfusion-free-fedora ->
%{SOURCE14}
--
Fedora release 16 (Verne) - Linux 3.1.0-5.fc16.x86_64
loadavg: 0.04 0.07 0.05
11:55 a.m.
2011/11/2 Michael Schwendt <mschwendt(a)gmail.com>:
After
rpm -ivh
http://download1.rpmfusion.org/free/fedora/development/x86_64/os/rpmfusio...
there is a problem installing some packages from RPM Fusion. For example:
# yum install a52dec
[...]
---> Package a52dec.x86_64 0:0.7.4-15.fc11 will be installed
[...]
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID 00a4d52b: NOKEY
Public key for a52dec-0.7.4-15.fc11.x86_64.rpm is not installed
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-16-x86_64
Importing GPG key 0xADF25D9C:
Userid : RPM Fusion free repository for Fedora (16)
<rpmfusion-buildsys(a)lists.rpmfusion.org>
Package: rpmfusion-free-release-16-1.noarch (installed)
From : /etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-16-x86_64
Is this ok [y/N]: y
Public key for a52dec-0.7.4-15.fc11.x86_64.rpm is not installed
Thx for having reported theses issues.
To me every packages provided within the fc16 repository must be
signed (or re-signed) with the fc16 key.
So there are two problems.
- The compat symlink which is wrong
- The non .fc16 packages that aren't resigned with the proper fc16 key.
I've also noticed two deviations from the fedora-release to the
rpmfusion{,nonfree}-release
- The former only provides a (primary) key for the %{version} release
it belongs to where the latter provide several keys
- The former doesn't use gpgcheck on the related rawhide repository
where the latter have it enabled.
I'm not sure to have all the implication of this deviation in mind yet.
Nicolas (kwizart)
3:04 p.m.
2011/11/2 Nicolas Chauvet <kwizart(a)gmail.com>:
2011/11/2 Michael Schwendt <mschwendt(a)gmail.com>:
> After
>
> rpm -ivh
http://download1.rpmfusion.org/free/fedora/development/x86_64/os/rpmfusio...
>
> there is a problem installing some packages from RPM Fusion. For example:
>
> # yum install a52dec
> [...]
> ---> Package a52dec.x86_64 0:0.7.4-15.fc11 will be installed
> [...]
> warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID 00a4d52b: NOKEY
> Public key for a52dec-0.7.4-15.fc11.x86_64.rpm is not installed
I've
resigned this package from the x86_64 development repository.
Can someone please retest this installation ?
Thx
3:31 p.m.
On Wed, 2 Nov 2011 16:04:58 +0100, NC (Nicolas) wrote:
>> After
>>
>> rpm -ivh
http://download1.rpmfusion.org/free/fedora/development/x86_64/os/rpmfusio...
>>
>> there is a problem installing some packages from RPM Fusion. For example:
>>
>> # yum install a52dec
>> [...]
>> ---> Package a52dec.x86_64 0:0.7.4-15.fc11 will be installed
>> [...]
>> warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID 00a4d52b:
NOKEY
>> Public key for a52dec-0.7.4-15.fc11.x86_64.rpm is not installed
I've resigned this package from the x86_64 development repository.
Can someone please retest this installation ?
Are you aware of the other packages that would need to be re-signed, too?
a52dec is just _one_ example.
Once the changed package arrives at the mirrors, installing it most likely
will work fine (requiring a "yum clean packages", however, to purge the
package cache).
$ rpm -Kv a52dec-0.7.4-15.fc11.x86_64.rpm
a52dec-0.7.4-15.fc11.x86_64.rpm:
Header V3 RSA/SHA256 Signature, key ID adf25d9c: OK
Header SHA1 digest: OK (6c0279ddaf2436f163cbcdbc1c1a0ae92fe6c769)
V3 RSA/SHA256 Signature, key ID 8fcff4da: NOKEY
V3 RSA/SHA256 Signature, key ID a3780952: NOKEY
V3 RSA/SHA256 Signature, key ID 00a4d52b: NOKEY
V3 RSA/SHA256 Signature, key ID adf25d9c: OK <-- (Good!)
MD5 digest: OK (a39d19f6839eccdb6915d433b5e807b0)
--
Fedora release 16 (Verne) - Linux 3.1.0-5.fc16.x86_64
loadavg: 0.18 0.05 0.06
10:51 p.m.
2011/11/2 Michael Schwendt <mschwendt(a)gmail.com>:
On Wed, 2 Nov 2011 16:04:58 +0100, NC (Nicolas) wrote:
> >> After
> >>
> >> rpm -ivh
http://download1.rpmfusion.org/free/fedora/development/x86_64/os/rpmfusio...
> >>
> >> there is a problem installing some packages from RPM Fusion. For example:
> >>
> >> # yum install a52dec
> >> [...]
> >> ---> Package a52dec.x86_64 0:0.7.4-15.fc11 will be installed
> >> [...]
> >> warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID 00a4d52b:
NOKEY
> >> Public key for a52dec-0.7.4-15.fc11.x86_64.rpm is not installed
> I've resigned this package from the x86_64 development repository.
> Can someone please retest this installation ?
Are you aware of the other packages that would need to be re-signed, too?
a52dec is just _one_ example.
From my tests, either the package is signed from the F-15 key if it's
not
rebuilt in the F-16 development time, either it is, and then
signed with the F-16 key.
So fixing the %{SOURCE14} to point to the F-15 primary key fixed the
behavior for me.
Can you confirm everything goes fine with rpmfusion-free-release-16-1.1 ?
Thx for your report.
Nicolas (kwizart)
11:13 p.m.
On Wed, 2 Nov 2011 23:51:28 +0100, NC (Nicolas) wrote:
> Are you aware of the other packages that would need to be
re-signed, too?
> a52dec is just _one_ example.
>From my tests, either the package is signed from the F-15 key if it's
not rebuilt in the F-16 development time, either it is, and then
signed with the F-16 key.
So fixing the %{SOURCE14} to point to the F-15 primary key fixed the
behavior for me.
Can you confirm everything goes fine with rpmfusion-free-release-16-1.1 ?
No, not fixed yet. And more broken symlinks. See below:
# rpm -qa gpg-pubkey|xargs rpm -e
# rpm -qa rpmfu\*
rpmfusion-free-release-16-1.1.noarch
# yum install arcem
[...]
Downloading Packages:
(1/2): arcem-1.10-5.cvs_20070611.fc11.x86_64.rpm
| 574 kB 00:00
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID 00a4d52b: NOKEY
Public key for arcem-1.10-5.cvs_20070611.fc11.x86_64.rpm is not installed
(2/2): xorg-x11-apps-7.6-2.fc15.x86_64.rpm
| 294 kB 00:00
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID a82ba4b7: NOKEY
Public key for xorg-x11-apps-7.6-2.fc15.x86_64.rpm is not installed
----------------------------------------------------------------------------------------------------------------------
Total 1.0
MB/s | 868 kB 00:00
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-16-x86_64
Importing GPG key 0xADF25D9C:
Userid : RPM Fusion free repository for Fedora (16)
<rpmfusion-buildsys(a)lists.rpmfusion.org>
Package: rpmfusion-free-release-16-1.1.noarch (installed)
From : /etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-16-x86_64
Is this ok [y/N]: y
Public key for arcem-1.10-5.cvs_20070611.fc11.x86_64.rpm is not installed
Thx for your report.
# ll /etc/pki/rpm-gpg/*17*
lrwxrwxrwx. 1 root root 44 Nov 3 00:06
/etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-17-i386 ->
RPM-GPG-KEY-rpmfusion-free-fedora-17-primary
lrwxrwxrwx. 1 root root 44 Nov 3 00:06
/etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-17-x86_64 ->
RPM-GPG-KEY-rpmfusion-free-fedora-17-primary
# file RPM-GPG-KEY-rpmfusion-free-fedora-17-primary
RPM-GPG-KEY-rpmfusion-free-fedora-17-primary: ERROR: cannot open
`RPM-GPG-KEY-rpmfusion-free-fedora-17-primary' (No such file or directory)
--
Fedora release 16 (Verne) - Linux 3.1.0-5.fc16.x86_64
loadavg: 0.29 0.14 0.08
4765
days inactive
4765
days old
rpmfusion-developers@lists.rpmfusion.org
5 comments
2 participants
participants (2)
-
Michael Schwendt -
Nicolas Chauvet