Project

General

Profile

Bug #7449

RPM GPG Key failed - Missing Key in Release 1.6.0

Added by Sven Milinski about 7 years ago. Updated over 4 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Packaging
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:

Description

Hey @all,

i've tried to update from 1.5 to 1.6. After a little search i found out that you changed the RPM-GPG-Signing key. We updated your keys and tried to update - but something seems to be missing...

Setting up Update Process
Resolving Dependencies
--> Running transaction check
---> Package foreman.noarch 0:1.5.0-1.el6 will be updated
--> Processing Dependency: foreman = 1.5.0-1.el6 for package: foreman-mysql2-1.5.0-1.el6.noarch
--> Processing Dependency: foreman = 1.5.0-1.el6 for package: foreman-postgresql-1.5.0-1.el6.noarch
---> Package foreman.noarch 0:1.6.0-1.el6 will be an update
--> Processing Dependency: ruby193-rubygem(validates_lengths_from_database) < 0.3.0 for package: foreman-1.6.0-1.el6.noarch
--> Processing Dependency: ruby193-rubygem(ldap_fluff) < 1.0.0 for package: foreman-1.6.0-1.el6.noarch
--> Processing Dependency: ruby193-rubygem(ldap_fluff) >= 0.3.0 for package: foreman-1.6.0-1.el6.noarch
--> Processing Dependency: ruby193-rubygem(apipie-rails) >= 0.2.5 for package: foreman-1.6.0-1.el6.noarch
--> Processing Dependency: ruby193-rubygem(deep_cloneable) >= 2.0.0 for package: foreman-1.6.0-1.el6.noarch
--> Processing Dependency: ruby193-rubygem(validates_lengths_from_database) >= 0.2.0 for package: foreman-1.6.0-1.el6.noarch
--> Processing Dependency: ruby193-rubygem(safemode) >= 1.2.1 for package: foreman-1.6.0-1.el6.noarch
--> Running transaction check
---> Package foreman-mysql2.noarch 0:1.5.0-1.el6 will be updated
---> Package foreman-mysql2.noarch 0:1.6.0-1.el6 will be an update
---> Package foreman-postgresql.noarch 0:1.5.0-1.el6 will be updated
---> Package foreman-postgresql.noarch 0:1.6.0-1.el6 will be an update
---> Package ruby193-rubygem-apipie-rails.noarch 0:0.1.2-1.el6 will be updated
---> Package ruby193-rubygem-apipie-rails.noarch 0:0.2.5-1.el6 will be an update
---> Package ruby193-rubygem-deep_cloneable.noarch 0:1.6.0-2.el6 will be updated
---> Package ruby193-rubygem-deep_cloneable.noarch 0:2.0.0-4.el6 will be an update
---> Package ruby193-rubygem-ldap_fluff.noarch 0:0.3.1-1.el6 will be installed
---> Package ruby193-rubygem-safemode.noarch 0:1.2.0-5.el6 will be updated
---> Package ruby193-rubygem-safemode.noarch 0:1.2.1-1.el6 will be an update
---> Package ruby193-rubygem-validates_lengths_from_database.noarch 0:0.2.0-1.el6 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================================================================================================================================================================================================
 Package                                                                                 Arch                                           Version                                             Repository                                                                   Size
==============================================================================================================================================================================================================================================================================
Updating:
 foreman                                                                                 noarch                                         1.6.0-1.el6                                         rhel-x86_64-foreman-stable-server-6                                         3.5 M
Installing for dependencies:
 ruby193-rubygem-ldap_fluff                                                              noarch                                         0.3.1-1.el6                                         rhel-x86_64-foreman-stable-server-6                                          13 k
 ruby193-rubygem-validates_lengths_from_database                                         noarch                                         0.2.0-1.el6                                         rhel-x86_64-foreman-stable-server-6                                         7.4 k
Updating for dependencies:
 foreman-mysql2                                                                          noarch                                         1.6.0-1.el6                                         rhel-x86_64-foreman-stable-server-6                                          11 k
 foreman-postgresql                                                                      noarch                                         1.6.0-1.el6                                         rhel-x86_64-foreman-stable-server-6                                          11 k
 ruby193-rubygem-apipie-rails                                                            noarch                                         0.2.5-1.el6                                         rhel-x86_64-foreman-stable-server-6                                         150 k
 ruby193-rubygem-deep_cloneable                                                          noarch                                         2.0.0-4.el6                                         rhel-x86_64-foreman-stable-server-6                                          17 k
 ruby193-rubygem-safemode                                                                noarch                                         1.2.1-1.el6                                         rhel-x86_64-foreman-stable-server-6                                          37 k

Transaction Summary
==============================================================================================================================================================================================================================================================================
Install       2 Package(s)
Upgrade       6 Package(s)

Total download size: 3.7 M
Is this ok [y/N]: y
Downloading Packages:
(1/8): foreman-1.6.0-1.el6.noarch.rpm                                                                                                                                                                                                                  | 3.5 MB     00:00
(2/8): foreman-mysql2-1.6.0-1.el6.noarch.rpm                                                                                                                                                                                                           |  11 kB     00:00
(3/8): foreman-postgresql-1.6.0-1.el6.noarch.rpm                                                                                                                                                                                                       |  11 kB     00:00
(4/8): ruby193-rubygem-apipie-rails-0.2.5-1.el6.noarch.rpm                                                                                                                                                                                             | 150 kB     00:00
(5/8): ruby193-rubygem-deep_cloneable-2.0.0-4.el6.noarch.rpm                                                                                                                                                                                           |  17 kB     00:00
(6/8): ruby193-rubygem-ldap_fluff-0.3.1-1.el6.noarch.rpm                                                                                                                                                                                               |  13 kB     00:00
(7/8): ruby193-rubygem-safemode-1.2.1-1.el6.noarch.rpm                                                                                                                                                                                                 |  37 kB     00:00
(8/8): ruby193-rubygem-validates_lengths_from_database-0.2.0-1.el6.noarch.rpm                                                                                                                                                                          | 7.4 kB     00:00
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                                                                                                         4.4 MB/s | 3.7 MB     00:00
warning: rpmts_HdrFromFdno: Header V4 RSA/SHA1 Signature, key ID 1aa043b8: NOKEY
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-rhel-x86_64-foreman-stable-server-6

The GPG keys listed for the "Foreman Stable x86_64 Server 6" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.

but the new key is there - is there another key missing ???

cat /etc/pki/rpm-gpg/RPM-GPG-rhel-x86_64-foreman-stable-server-6
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.13 (GNU/Linux)
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=LN8V
-----END PGP PUBLIC KEY BLOCK-----

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1
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=25ae
-----END PGP PUBLIC KEY BLOCK-----

History

#1 Updated by Sven Milinski about 7 years ago

btw... there is an RPM missing in your repository...

ruby193-rubygem-minitest-2.5.1-29.el6.noarch.rpm

found that RPM on a mirror site of your repo... O.o

[[http://www.filewatcher.com/m/ruby193-rubygem-minitest-2.5.1-29.el6.noarch.rpm.53752-0.html]]

#2 Updated by Anonymous about 7 years ago

#3 Updated by Dominic Cleal about 7 years ago

  • Category set to Packaging

ruby193-rubygem-minitest should be provided by RHSCL/SCL, not us.

The key reported in the message "warning: rpmts_HdrFromFdno: Header V4 RSA/SHA1 Signature, key ID 1aa043b8: NOKEY" is an older one, it's what we used to sign Foreman 1.5 and older. Foreman 1.6 is signed with a specific 1.6 key (we did this after the GPG security incident to minimise the impact) which has the ID 0x667D1F07 (http://theforeman.org/security.html#GPGkeys).

The key in the GPG file you pasted doesn't look correct? It should be http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xA91E2984667D1F07 for 1.6.

#4 Updated by Dominic Cleal over 6 years ago

  • Status changed from New to Feedback

#5 Updated by Sven Milinski over 6 years ago

Ticket can be closed !

Issue caused by a merge of different repositories into one. You have to separate each repo to have a valid RPM dependency resolving.

Thanks for the support !

bye

#6 Updated by Anonymous over 4 years ago

  • Status changed from Feedback to Rejected

Also available in: Atom PDF