Share your knowledge at the LQ Wiki.
Go Back > Forums > Linux Forums > Linux - General
User Name
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.


  Search this Thread
Old 11-18-2003, 09:36 PM   #1
LQ Newbie
Registered: Oct 2003
Location: Tokyo
Distribution: REDHAT
Posts: 8

Rep: Reputation: 0
rpm gpg verification problem


I was trying to install a thridparty program (keychain from
according to the instructions on the website, I tried to verify the downloaded rpm as follows:
bash-2.05b# gpg --keyserver --recv-key
gpg: /root/.gnupg: directory created
gpg: /root/.gnupg/options: new options file created
gpg: you have to start GnuPG again, so it can read the new
options file
bash-2.05b# gpg --keyserver --recv-key
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: requesting key 302A3876 from HKP keyserver
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 302A3876: public key imported
gpg: Total number processed: 1
gpg: imported: 1

rpm -K keychain-2.0.2-1.noarch.rpm
keychain-2.0.2-1.noarch.rpm: md5 (GPG) NOT OK (MISSING
KEYS: GPG#302a3876)

It seems that somehow redhat rpm program can not find the gpg keys created by gpg program.

Any help would be appreciated.
Old 11-20-2003, 10:53 AM   #2
Registered: May 2001
Posts: 29,359
Blog Entries: 55

Rep: Reputation: 3546Reputation: 3546Reputation: 3546Reputation: 3546Reputation: 3546Reputation: 3546Reputation: 3546Reputation: 3546Reputation: 3546Reputation: 3546Reputation: 3546
Something probably has gone wrong on your side. I just tried it (as non-root user) w/o probs. Two paths to check: first of all you just seem to have installed GPG, maybe check your config settings. Second, do a "rpm --checksig --no --nogpg" to verify at least the MD5sum is correct, if it isn't then you downloaded a b0rken rpm.
Old 11-20-2003, 08:07 PM   #3
LQ Newbie
Registered: Oct 2003
Location: Tokyo
Distribution: REDHAT
Posts: 8

Original Poster
Rep: Reputation: 0
thanks unSpawn,

I did exactly what you suggested, but things are getting more and more strange!

in the rpm man page --nogpg (and --nopgp) are listed.

however, when i do one of the following:

rpm --checksig --nogpg
> --nogpg: unknown option
rpm --checksig --no --nogpg (the secound option --no you suggested was it a mistake)
> --no : unkown option
rpm --checksig --nopgp
> --nopgp: unknown option

I am totally puzzelled now. (Tried upgrading rpm package from redhat, but found that it is same version 4.1-1.06 as i have )

What do you think is happening.

by the way i tried to verify rpm package using rpm --K command and it works fine.
Old 12-14-2004, 12:31 PM   #4
LQ Newbie
Registered: Apr 2004
Distribution: CentOS 5 x86_64
Posts: 16

Rep: Reputation: 0
same problem just ignored it

I ran into the same issue with the exact same package. I never found a fix. I just ignored it (I know, not a great idea, especially when dealing with a security related program like keychain).



Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Nagios Config Verification Problem creighzy Ubuntu 3 04-20-2005 12:46 PM
gpg problem. TheRealDeal Linux - General 1 04-06-2005 01:54 AM
FC2 gpg rpm imported but apparently not correct spectrumver1 Fedora 0 03-22-2004 04:31 AM
gpg problem pr1sg Linux - Software 7 05-11-2003 10:25 PM
problem with gpg raven Linux - Software 1 09-29-2002 01:54 PM > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 03:30 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration