Kaixo!
Li Thu, 29 Aug 2002 11:13:57 +0200,
 Guillaume Rousse <[EMAIL PROTECTED]> scrijheut:

 GR> Les paquetages suivants ont des signatures non valides:
 GR> /var/cache/urpmi/rpms/libmp3lame0-devel-3.93-0.20020827.1plf.i586.rpm
 GR> /var/cache/urpmi/rpms/libmp3lame0-3.93-0.20020827.1plf.i586.rpm
 GR> /var/cache/urpmi/rpms/ppp-2.4.1-6plf.i586.rpm

 GR> I guess urpmi by default only know mdksoft public key. How can i configure it 
 GR> for additional keys ? 

urpmi is run as root, so you need to add the signatures to the root
keyring:

- get the GPG key into a file
- su -
- gpg --import thatfile

or if you know the keyid:

- su -
- gpg --keyserver somekeyserver --recv-keys 123456

with of course 123456 replaced by the right keyid.


Now; it would be very nice if the reason of the signature verification
failure is because of unknown key, to popup a dialog asking if
the user wants to get the key from a server (with a text field where
to type a server name), or from a file (with a text field where
to type an URI to tell where/how to get a file with key) and try again to
check the rpm packages


(PS: if you add to your /root/.gnupg/options something like:

keyserver wwwkeys.ch.pgp.net
keyserver-options auto-key-retrieve

it will automatically download and install any unknown key from the
specified key server; and it will work for anything using gpg: urpmi,
your mail program, etc. You can of course add it too to your own account
gnupg config)

-- 
Ki �a vos v�ye b�n,
Pablo Saratxaga

Caution: breathing may be hazardous to your health.

Reply via email to