packman in yast

little_penguin · 08-05-2006, 06:33 PM

im trying to add packman to source list in yast, when i do it it comes up that the signature isnt verfied, what does this mean? can it be sorted and can i just use it anyway?

EclipseAgent · 08-05-2006, 08:06 PM

Quote:

Originally Posted by little_penguin

im trying to add packman to source list in yast, when i do it it comes up that the signature isnt verfied, what does this mean? can it be sorted and can i just use it anyway?

That's fine.. Just check the check box and accept.

jschiwal · 08-05-2006, 08:16 PM

The packman repository probably has an rpmkey-packman rpm package that will install the signature to the rpm database.

little_penguin · 08-06-2006, 08:10 AM

Quote:

Originally Posted by EclipseAgent

That's fine.. Just check the check box and accept.

if using a packman mirror, doesnt this make this unsafe? if the packmans keys arent used to check the files, couldnt they have been tampered with?

little_penguin · 08-06-2006, 08:12 AM

Quote:

Originally Posted by jschiwal

The packman repository probably has an rpmkey-packman rpm package that will install the signature to the rpm database.

I tried downloading the packmans rpm key but yast or zen wouldnt install it

asimba · 08-06-2006, 08:32 AM

It just works ok on my suse - Can you be specific what exactly we are doing and what error we get if any ?

I have added a few more repositries which again just work good.

Here are few I have tried.

http://www.suseforums.net/index.php?showtopic=18464

http://en.opensuse.org/Additional_Ya...e_Repositories

little_penguin · 08-06-2006, 08:37 AM

Quote:

Originally Posted by asimba

It just works ok on my suse - Can you be specific what exactly we are doing and what error we get if any ?

I have added a few more repositries which again just work good.

Here are few I have tried.

http://www.suseforums.net/index.php?showtopic=18464

http://en.opensuse.org/Additional_Ya...e_Repositories

Yast seems to accept the packman details ok, but it pops up a box saying that packman hasnt been digitally signed, I have heard that you can import packmans digital key into your system so your system will check autmaticly that each package is being downloaded the way packman intended it to be and it hasnt been messed about with, Im not sure how to do this though, I tried downloading packmans digital key that was an rpm but yast or zen wouldnt install it, any ideas?

EclipseAgent · 08-06-2006, 10:13 AM

Yes.. the digital signature thing is safe to accept and ignore with no problems..

Have you tried to install the RPM key via Command line to see what it errors on?