Actions
Bug #7449
closed
RPM GPG Key failed - Missing Key in Release 1.6.0
Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Packaging
Target version:
-
Description
Hey @all,
i've tried to update from 1.5 to 1.6. After a little search i found out that you changed the RPM-GPG-Signing key. We updated your keys and tried to update - but something seems to be missing...
Setting up Update Process Resolving Dependencies --> Running transaction check ---> Package foreman.noarch 0:1.5.0-1.el6 will be updated --> Processing Dependency: foreman = 1.5.0-1.el6 for package: foreman-mysql2-1.5.0-1.el6.noarch --> Processing Dependency: foreman = 1.5.0-1.el6 for package: foreman-postgresql-1.5.0-1.el6.noarch ---> Package foreman.noarch 0:1.6.0-1.el6 will be an update --> Processing Dependency: ruby193-rubygem(validates_lengths_from_database) < 0.3.0 for package: foreman-1.6.0-1.el6.noarch --> Processing Dependency: ruby193-rubygem(ldap_fluff) < 1.0.0 for package: foreman-1.6.0-1.el6.noarch --> Processing Dependency: ruby193-rubygem(ldap_fluff) >= 0.3.0 for package: foreman-1.6.0-1.el6.noarch --> Processing Dependency: ruby193-rubygem(apipie-rails) >= 0.2.5 for package: foreman-1.6.0-1.el6.noarch --> Processing Dependency: ruby193-rubygem(deep_cloneable) >= 2.0.0 for package: foreman-1.6.0-1.el6.noarch --> Processing Dependency: ruby193-rubygem(validates_lengths_from_database) >= 0.2.0 for package: foreman-1.6.0-1.el6.noarch --> Processing Dependency: ruby193-rubygem(safemode) >= 1.2.1 for package: foreman-1.6.0-1.el6.noarch --> Running transaction check ---> Package foreman-mysql2.noarch 0:1.5.0-1.el6 will be updated ---> Package foreman-mysql2.noarch 0:1.6.0-1.el6 will be an update ---> Package foreman-postgresql.noarch 0:1.5.0-1.el6 will be updated ---> Package foreman-postgresql.noarch 0:1.6.0-1.el6 will be an update ---> Package ruby193-rubygem-apipie-rails.noarch 0:0.1.2-1.el6 will be updated ---> Package ruby193-rubygem-apipie-rails.noarch 0:0.2.5-1.el6 will be an update ---> Package ruby193-rubygem-deep_cloneable.noarch 0:1.6.0-2.el6 will be updated ---> Package ruby193-rubygem-deep_cloneable.noarch 0:2.0.0-4.el6 will be an update ---> Package ruby193-rubygem-ldap_fluff.noarch 0:0.3.1-1.el6 will be installed ---> Package ruby193-rubygem-safemode.noarch 0:1.2.0-5.el6 will be updated ---> Package ruby193-rubygem-safemode.noarch 0:1.2.1-1.el6 will be an update ---> Package ruby193-rubygem-validates_lengths_from_database.noarch 0:0.2.0-1.el6 will be installed --> Finished Dependency Resolution Dependencies Resolved ============================================================================================================================================================================================================================================================================== Package Arch Version Repository Size ============================================================================================================================================================================================================================================================================== Updating: foreman noarch 1.6.0-1.el6 rhel-x86_64-foreman-stable-server-6 3.5 M Installing for dependencies: ruby193-rubygem-ldap_fluff noarch 0.3.1-1.el6 rhel-x86_64-foreman-stable-server-6 13 k ruby193-rubygem-validates_lengths_from_database noarch 0.2.0-1.el6 rhel-x86_64-foreman-stable-server-6 7.4 k Updating for dependencies: foreman-mysql2 noarch 1.6.0-1.el6 rhel-x86_64-foreman-stable-server-6 11 k foreman-postgresql noarch 1.6.0-1.el6 rhel-x86_64-foreman-stable-server-6 11 k ruby193-rubygem-apipie-rails noarch 0.2.5-1.el6 rhel-x86_64-foreman-stable-server-6 150 k ruby193-rubygem-deep_cloneable noarch 2.0.0-4.el6 rhel-x86_64-foreman-stable-server-6 17 k ruby193-rubygem-safemode noarch 1.2.1-1.el6 rhel-x86_64-foreman-stable-server-6 37 k Transaction Summary ============================================================================================================================================================================================================================================================================== Install 2 Package(s) Upgrade 6 Package(s) Total download size: 3.7 M Is this ok [y/N]: y Downloading Packages: (1/8): foreman-1.6.0-1.el6.noarch.rpm | 3.5 MB 00:00 (2/8): foreman-mysql2-1.6.0-1.el6.noarch.rpm | 11 kB 00:00 (3/8): foreman-postgresql-1.6.0-1.el6.noarch.rpm | 11 kB 00:00 (4/8): ruby193-rubygem-apipie-rails-0.2.5-1.el6.noarch.rpm | 150 kB 00:00 (5/8): ruby193-rubygem-deep_cloneable-2.0.0-4.el6.noarch.rpm | 17 kB 00:00 (6/8): ruby193-rubygem-ldap_fluff-0.3.1-1.el6.noarch.rpm | 13 kB 00:00 (7/8): ruby193-rubygem-safemode-1.2.1-1.el6.noarch.rpm | 37 kB 00:00 (8/8): ruby193-rubygem-validates_lengths_from_database-0.2.0-1.el6.noarch.rpm | 7.4 kB 00:00 ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Total 4.4 MB/s | 3.7 MB 00:00 warning: rpmts_HdrFromFdno: Header V4 RSA/SHA1 Signature, key ID 1aa043b8: NOKEY Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-rhel-x86_64-foreman-stable-server-6 The GPG keys listed for the "Foreman Stable x86_64 Server 6" repository are already installed but they are not correct for this package. Check that the correct key URLs are configured for this repository.
but the new key is there - is there another key missing ???
cat /etc/pki/rpm-gpg/RPM-GPG-rhel-x86_64-foreman-stable-server-6 -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.13 (GNU/Linux) mQENBEzaPPkBCADZpJlUyz9PcekBFSu0MR/j+p2/M5zGBGraDHFh3C2S7xw3S/nc CI0lMj47Gb7Xa3dkoK1nEfMbbiB6B7PurjHxY8YcIvWEn8k1/DO9j4MMXqNBeU/j shb0KnrMyHDkHx+Yn5jJ5zsXXkuQiThrU7tW3tsEF62hfDceq9ERihQnySDkF/xn 6rpvjjA/UOaotCK35dglIPBHMwgtYvYAClcwsOk8QFKwJnFemvOz0oqQm1NM3F7B Ps0TlU6g6yDqTzeykeFFD9FFAV2LJYMd10h7yLIBeJQN/Gz899vzQIs9uBKv1gdv 9Z39qH2nPoLf5h9FN08aJeHGFh3jiFsq1/BvABEBAAG0NUZvcmVtYW4gQXJjaGl2 ZSBTaWduaW5nIEtleSA8cGFja2FnZXNAdGhlZm9yZW1hbi5vcmc+iQE4BBMBAgAi BQJM2jz5AhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBmzwU/53X/B6jO B/0WpPnHLaWpP8EgUnpN7RPUX6nb9u+Snz+2NVaVDBvLAHxlohClXEo/2WrXIDYk Ijo5kTWo7X/wMtcbOeX6K7nh7cghIVo95DrOGEipyWJ1BBvnk2cS8pmGkHZzWSRA SiTgr14nLPWnKvBeho61Kl3jCsBcLve87mvJwzC76jr/4g+H0DF0GaUIAvRZXCXV NZIEVfT2HKj7RfOh9Qlcx+N6Yo4ovz7ChZMggot1qtJLVYah9fnByJgQ8k2YlwJI xfQiGj1kjXmAvpqBFGp13prQs7uDHXwD/kerzF4Z/nhVhXW4f0h4yeq1INC2GzXe pu3V4T8Tfojdbmm23/c2rrPeuQENBEzaPPkBCACq0agi4H2bPwKvx/H3PVKcLCMt RuY/OtTgdOm/600rqgVMzpXAFtTHMEatoXqWv6V61yVHjmHbLgUDEfV2Sjxw4/d+ pU64AmKphpUvX4oArk2E3Dne4D2RVtO2XE6uPVjJ+GFjn9GTtbJoO/zqLW0dm3S6 vQFOdFbX9XWr9B+wkdseq4F69KB1Nbiex/EN9QCnVKVCrfFE5grhSKSI9XZ0M5lM 6OQddDQRMTxEs0A99r7mJFsWbL5x7ObMhXmBnOEWudyEA/biyxdP8jK9OJssqGJH sZKrzl9Tc+hgT73TR9Rds84CnKTbWTjycttMZdXXbVFRU2toz4WrxcF82gEPABEB AAGJAR8EGAECAAkFAkzaPPkCGwwACgkQZs8FP+d1/wdqYgf+IoiXzxlFVA+wQSZB nvvtwY8EuxjDHZ7Ab9gZeNiqW+Hz97mKCxNLbWJk49nC84DlfCkHl2Gm4z+r+phJ idONIZR4+fQV/cXrveAHjvHjmgiN+0tpdh4ZGhiyIZO17jGjwGGt+YfIIY43RKIb KLsP8E+yDO39HKeY1u3QCSqZ+r1dOvT+XgDE4ncfn55/YqKkY6ZeJAtj6iQxvJRG rlSod2yoZ9kySd3CxFU4ycpiFEKmq4HfVUMWcUVPqx8StvrfkZxGGds9qFmIgtwf K2hLSHJLKUex8Jh3TJuTgdMKFYVQ5bO7sY5ZnsXKxUvtgLmh2MZTU23IlNS/1aJg NL93tw== =LN8V -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1 mQINBFPsiw0BEAC0Rxp4SSHM8x88t+l1zeKTcI+EFvOLsqBwlns/mGT+fP6EBVWr tUKkoMe+FI1c5TQsgLBrO3jH4JsbWV72nV4eMCdhN/ZdRHKm7i/iyH3BU8T5saxU BkjXaEt65Yg3H9H85Mo35NTbvoROzteenKezyY8Jpp2rpG0l4vAP05ApFpSwkgH2 E9HqKd+cAHadfwRdwuEd+QggeRXGff0khe6fQfnFGr37FkyiBvf5iwMl7XDoFN/t EAqGWXgNJFwKWuclqubcikcoBKHl4jWipSupSkPmVV7x+Ez4xPDSBHj6Nm+WUYtl ARJOGpjQV9wCNSoUHSqT6jElRsgKZBFoihM2LqQlDfFUILbF6D1lMJGyy1vY9hJ/ q3W7LChEt2nolfVP/R/kfVlR3K7qUOIjGXrE+v2P77T41d/Xk9pAupRNriUsQY11 bOpMRNQXSZB4/oYn5Y956lH6Ol57hWcdeQ/rQiDeb2Z0fNqH9R5BiDrbg1cCIImj NFgEqIh/5TIqPA72HuMznndhmPPXbvj7I7nW22VmJY+xKXuJwAiky8l777uogcEH SoaolMGYD4EzawlWeiZU9m8d5eKxVKiIyd6yo86fe4i++RyEPBInDRH9PwurGX/7 cdWRw5g3nyPvP5kxw4RJIsvwiGF5Yi5VvYSfrIawS3jkVdeypoTX6YADoQARAQAB tDtGb3JlbWFuIFJlbGVhc2UgU2lnbmluZyBLZXkgKDEuNikgPHBhY2thZ2VzQHRo ZWZvcmVtYW4ub3JnPokCPgQTAQIAKAUCU+yLDQIbAwUJAeEzgAYLCQgHAwIGFQgC CQoLBBYCAwECHgECF4AACgkQqR4phGZ9HwdPyQ//dE6LYi6fSpEluMGpQ+MQp7l1 ZRKnQ3bopTQ+a3IcqtRr1KQqiiLqYm7UNyyHw4v+mSOW2DOw5lNIRRsTdNm0MiXk SnrIRVJltC8DyGwnm3hxFzgoFGiSI/A2AuNei0puyrVDnR4crPQ52h/t+3YYFE8w 8q875k5IW9kdwy9o7GbG++BLmFXiDtfJ7EFphofb9TLRlYvbZ3aPtxDSqng3QigF LYD/47x/DcEdC39cCOHQlorCPUt2Y/aurL9Il6smYvmquw+5i8WXw02wKf60ceJk 9uK8Hh/u82L+QRtu/TxdznW1aPek1ZoM6RHTtdU8PW0uU0qupCe0D/VKBzwmPDYw MxILSHhGeKBkO4rw1m4VoAupGNiAKcdpWJ6rGZ2qCQi1FmvkXkQvFw13QxXYLFCS 7sLVEtKomiD9H8LYrTVi/TRqjK1n2lilxHayOZeyiyWK3dIaQGe4RjWxEEdJnung w/g6+9lolxd1YYTQI3q4OBUE9cjRGNK7+cd8bZXDQ6zC/eg1NCSR+SNrE8C01UcQ iokDqCxnVMF63GUD7q/ttWtnHOrGSW32nNr7ZoAAdsSk5kD2KW3vEfy9fh1iaFAq MfSa7gpkaZH9b69QYtIUCAxd1geIBNgtchNbSvYftGpJf1sa0e6GEAKX3aVhYZDI +coQDk2mm+Szu8pn/JO5Ag0EU+yLDQEQAPTBRW9EfdvBhyoa4W23C81+WOOgql9G EHvQfGb3FM7lKqW4HsKmDvREaDpqwaMklQfTL9dg3B7SZF/ccW8OjAY0SDr+Zryf EYkYeHGbUTkhR2eRyYDy01/Dkz1UPanPsPzyLSuWQKmd5FMkTY3RXoWUHLci9ZNu 04jmjwQbEG/+iqFQ1SpkjGhVoaoFTkgbcRuzqZ2WJkMwN39tpAJKdDC5mV9F5GF7 i5zmhQ3W6vqUQBXsnHQyZzvQECeBmuUZH0Rleu6Ui/NCE1wU7FcmPcuZqVc8GOCd S1JRnL31l2ciQkmPxjpOZ3Gr8azWznOA2Pdol3KVue9xEHPB8Xe9gDXLxiLK9wzQ W4gHemOfUvC+o2DE+vjidERIHrKDcxv5DYgWweR2B1e3aHS24609mdE4ksNaE25F OUrHw1mD/ck0RNEf6ww/Ss2wEUrEJvU7T/KtAzMUlFQPR2/rXyqwysKlZYyRc3a+ vLD0cB/Wms0jK71H8sfsh5+GWJsdbW9GPpRaoJ1FlNo9B2t3s2VTRi7htvEMEzTA GZtmGcrCWtA/Dpm5Xv1gIhyaDw0txTClOVrECdIuDeCui+AIP3kYWeQjCjpBu2cP E574u8IrkYjlR0irmSYfEJVKaRGUBAtwTfUGvqFuYNlargNmFeF2jnFMvL50Xvv9 Xas6KX8LMJkFABEBAAGJAiUEGAECAA8FAlPsiw0CGwwFCQHhM4AACgkQqR4phGZ9 Hwejhg/9FIUtrnVXDfGjndPVqjq47laLHSO/P1PN+8xJmHcaYNd6TbGlqZ/FU1HV vr1RjywizJzKra5ArqS7wf9I69xQ7Bf5J60ej2G9iLLZBKdWyBFbROx+fcTNE+nd qA1bZOdQdqO1EFxWG5HwXNd4FywZMsvAAfj1+TiNCtiexI/RbADreKlvK5rHHazp Dz64TcNqNgsEPLX2i6QgmT4hnTM0rmZE4IcyYpsG2RkKxOSfXVm5Y2Rtn5qXBEfP GWNuw6I4dD+5PFubfbw1GGNw/ztQrrQ7stsT1QRXiGCraxqkft+6Wmay+1RG0/cG 9b1s7G7EWQnrBPCnrbs9ht5O9FkVPZxtYMTtDLZ63EfW7ZYgTpD1N2C8k/Cxnpmg 1EpOg5mgeovsCXcgA9apelDxdg4b7idXT2ZkzuwGpXlq/UcORU1wmAFJSwXPmNvN hkP0dzH8Oq9GeWDFP8qP4tG16sbndeMI/SvfIoKwSgBcrPs8Hfyu6OF4l1qXjuWD DnATjaNiQtSw/HqP4nPagr5QJ+7nDxQin6gCb/vz5eRv3iwW92RhamozTQMrYBU8 XZh+7YLeKvrf+lKCxHwS9sFBFR+hkM1B9D/0o3V0U2BjzGIxklkMF106BWgtTaHm zv+pPYl+T6PFDX3RvolJ8lYQghiM2Ysi0CXnIgXVx7xvTIy4qu0= =25ae -----END PGP PUBLIC KEY BLOCK-----
Updated by Sven Milinski over 10 years ago
btw... there is an RPM missing in your repository...
ruby193-rubygem-minitest-2.5.1-29.el6.noarch.rpm
found that RPM on a mirror site of your repo... O.o
[[http://www.filewatcher.com/m/ruby193-rubygem-minitest-2.5.1-29.el6.noarch.rpm.53752-0.html]]
Updated by Anonymous over 10 years ago
Where all the steps from https://groups.google.com/forum/#!topic/foreman-announce/BiIT784Mb7Q taken?
Updated by Dominic Cleal over 10 years ago
- Category set to Packaging
ruby193-rubygem-minitest should be provided by RHSCL/SCL, not us.
The key reported in the message "warning: rpmts_HdrFromFdno: Header V4 RSA/SHA1 Signature, key ID 1aa043b8: NOKEY" is an older one, it's what we used to sign Foreman 1.5 and older. Foreman 1.6 is signed with a specific 1.6 key (we did this after the GPG security incident to minimise the impact) which has the ID 0x667D1F07 (http://theforeman.org/security.html#GPGkeys).
The key in the GPG file you pasted doesn't look correct? It should be http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xA91E2984667D1F07 for 1.6.
Updated by Dominic Cleal almost 10 years ago
- Status changed from New to Feedback
Updated by Sven Milinski almost 10 years ago
Ticket can be closed !
Issue caused by a merge of different repositories into one. You have to separate each repo to have a valid RPM dependency resolving.
Thanks for the support !
bye
Updated by Anonymous almost 8 years ago
- Status changed from Feedback to Rejected
Actions