LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
Search this Thread
Old 11-18-2003, 09:36 PM   #1
pcwulf
LQ Newbie
 
Registered: Oct 2003
Location: Tokyo
Distribution: REDHAT
Posts: 8

Rep: Reputation: 0
rpm gpg verification problem


Hi,

I was trying to install a thridparty program (keychain from gentoo.org/proj/en/keychain.xml)
according to the instructions on the website, I tried to verify the downloaded rpm as follows:
bash-2.05b# gpg --keyserver pgp.mit.edu --recv-key
302A3876
gpg: /root/.gnupg: directory created
gpg: /root/.gnupg/options: new options file created
gpg: you have to start GnuPG again, so it can read the new
options file
bash-2.05b# gpg --keyserver pgp.mit.edu --recv-key
302A3876
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: requesting key 302A3876 from HKP keyserver
pgp.mit.edu
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 302A3876: public key imported
gpg: Total number processed: 1
gpg: imported: 1

rpm -K keychain-2.0.2-1.noarch.rpm
keychain-2.0.2-1.noarch.rpm: md5 (GPG) NOT OK (MISSING
KEYS: GPG#302a3876)

It seems that somehow redhat rpm program can not find the gpg keys created by gpg program.

Any help would be appreciated.
 
Old 11-20-2003, 10:53 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,994
Blog Entries: 54

Rep: Reputation: 2745Reputation: 2745Reputation: 2745Reputation: 2745Reputation: 2745Reputation: 2745Reputation: 2745Reputation: 2745Reputation: 2745Reputation: 2745Reputation: 2745
Something probably has gone wrong on your side. I just tried it (as non-root user) w/o probs. Two paths to check: first of all you just seem to have installed GPG, maybe check your config settings. Second, do a "rpm --checksig --no --nogpg" to verify at least the MD5sum is correct, if it isn't then you downloaded a b0rken rpm.
 
Old 11-20-2003, 08:07 PM   #3
pcwulf
LQ Newbie
 
Registered: Oct 2003
Location: Tokyo
Distribution: REDHAT
Posts: 8

Original Poster
Rep: Reputation: 0
thanks unSpawn,

I did exactly what you suggested, but things are getting more and more strange!

in the rpm man page --nogpg (and --nopgp) are listed.

however, when i do one of the following:

rpm --checksig --nogpg
> --nogpg: unknown option
rpm --checksig --no --nogpg (the secound option --no you suggested was it a mistake)
> --no : unkown option
rpm --checksig --nopgp
> --nopgp: unknown option

I am totally puzzelled now. (Tried upgrading rpm package from redhat, but found that it is same version 4.1-1.06 as i have )

What do you think is happening.

by the way i tried to verify rpm package using rpm --K command and it works fine.
 
Old 12-14-2004, 12:31 PM   #4
mike-g2
LQ Newbie
 
Registered: Apr 2004
Distribution: CentOS 5 x86_64
Posts: 16

Rep: Reputation: 0
same problem just ignored it

I ran into the same issue with the exact same package. I never found a fix. I just ignored it (I know, not a great idea, especially when dealing with a security related program like keychain).

Mike
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Nagios Config Verification Problem creighzy Ubuntu 3 04-20-2005 12:46 PM
gpg problem. TheRealDeal Linux - General 1 04-06-2005 01:54 AM
FC2 gpg rpm imported but apparently not correct spectrumver1 Fedora 0 03-22-2004 04:31 AM
gpg problem pr1sg Linux - Software 7 05-11-2003 10:25 PM
problem with gpg raven Linux - Software 1 09-29-2002 01:54 PM


All times are GMT -5. The time now is 04:05 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration