Re: [Cooker] signature checks by urpmi

2002-09-03 Thread Pablo Saratxaga

Kaixo!
Li Thu, 29 Aug 2002 11:13:57 +0200,
 Guillaume Rousse [EMAIL PROTECTED] scrijheut:

 GR Les paquetages suivants ont des signatures non valides:
 GR /var/cache/urpmi/rpms/libmp3lame0-devel-3.93-0.20020827.1plf.i586.rpm
 GR /var/cache/urpmi/rpms/libmp3lame0-3.93-0.20020827.1plf.i586.rpm
 GR /var/cache/urpmi/rpms/ppp-2.4.1-6plf.i586.rpm

 GR I guess urpmi by default only know mdksoft public key. How can i configure it 
 GR for additional keys ? 

urpmi is run as root, so you need to add the signatures to the root
keyring:

- get the GPG key into a file
- su -
- gpg --import thatfile

or if you know the keyid:

- su -
- gpg --keyserver somekeyserver --recv-keys 123456

with of course 123456 replaced by the right keyid.


Now; it would be very nice if the reason of the signature verification
failure is because of unknown key, to popup a dialog asking if
the user wants to get the key from a server (with a text field where
to type a server name), or from a file (with a text field where
to type an URI to tell where/how to get a file with key) and try again to
check the rpm packages


(PS: if you add to your /root/.gnupg/options something like:

keyserver wwwkeys.ch.pgp.net
keyserver-options auto-key-retrieve

it will automatically download and install any unknown key from the
specified key server; and it will work for anything using gpg: urpmi,
your mail program, etc. You can of course add it too to your own account
gnupg config)

-- 
Ki ça vos våye bén,
Pablo Saratxaga

Caution: breathing may be hazardous to your health.




[Cooker] signature checks by urpmi

2002-08-29 Thread Guillaume Rousse

Les paquetages suivants ont des signatures non valides:
/var/cache/urpmi/rpms/libmp3lame0-devel-3.93-0.20020827.1plf.i586.rpm
/var/cache/urpmi/rpms/libmp3lame0-3.93-0.20020827.1plf.i586.rpm
/var/cache/urpmi/rpms/ppp-2.4.1-6plf.i586.rpm

I guess urpmi by default only know mdksoft public key. How can i configure it 
for additional keys ? 
-- 
Guillaume Rousse [EMAIL PROTECTED]
GPG key http://lis.snv.jussieu.fr/~rousse/gpgkey.html




Re: [Cooker] signature checks by urpmi

2002-08-29 Thread Guillaume Rousse

Le Jeudi 29 Août 2002 12:32, Fabrice MARIE a écrit :
 On Thursday 29 August 2002 17:13, Guillaume Rousse wrote:
  Les paquetages suivants ont des signatures non valides:
  /var/cache/urpmi/rpms/libmp3lame0-devel-3.93-0.20020827.1plf.i586.rpm
  /var/cache/urpmi/rpms/libmp3lame0-3.93-0.20020827.1plf.i586.rpm
  /var/cache/urpmi/rpms/ppp-2.4.1-6plf.i586.rpm
  I guess urpmi by default only know mdksoft public key. How can i
  configure it for additional keys ?

 Hello,

 Just had the same problem with ppp-2.4.1-6plf.i586.rpm ...

 When you run
 # rpm --checksig /var/cache/urpmi/rpms/ppp-2.4.1-6plf.i586.rpm
 rpm will tell you the KeyID of the key you have to download. Then :
Actually, you have to add -v to make it tells you the key ID

 # gpg --recv-keys --keyserver wwwkeys.pgp.net 0xTHE_KEY_ID_IN_HEXA_8_DIGITS

 Then urpmi will match the signature properly, and install accordingly.
As it is my very own key that is involved here, i prefer to check in my 
keyring :-)
-- 
Guillaume Rousse [EMAIL PROTECTED]
GPG key http://lis.snv.jussieu.fr/~rousse/gpgkey.html




Re: [Cooker] signature checks by urpmi

2002-08-29 Thread Fabrice MARIE

On Thursday 29 August 2002 17:13, Guillaume Rousse wrote:
 Les paquetages suivants ont des signatures non valides:
 /var/cache/urpmi/rpms/libmp3lame0-devel-3.93-0.20020827.1plf.i586.rpm
 /var/cache/urpmi/rpms/libmp3lame0-3.93-0.20020827.1plf.i586.rpm
 /var/cache/urpmi/rpms/ppp-2.4.1-6plf.i586.rpm
 I guess urpmi by default only know mdksoft public key. How can i configure
 it for additional keys ?

Hello,

Just had the same problem with ppp-2.4.1-6plf.i586.rpm ...

When you run
# rpm --checksig /var/cache/urpmi/rpms/ppp-2.4.1-6plf.i586.rpm
rpm will tell you the KeyID of the key you have to download. Then :

# gpg --recv-keys --keyserver wwwkeys.pgp.net 0xTHE_KEY_ID_IN_HEXA_8_DIGITS

Then urpmi will match the signature properly, and install accordingly.

Have a nice day,

Fabrice.
--
Fabrice MARIE
Senior RD Engineer
Celestix Networks
http://www.celestix.com/

Silly hacker, root is for administrators
   -Unknown