On Thu, 2003-06-12 at 07:43, Rolf Pedersen wrote: > [..] > > On Thu, 2003-06-12 at 04:59, Tango Echo wrote: > > > >>Thanks for the reply. Unfortunately, I'm still getting > >>the error after following your instructions... The > >>gnu pg seemed to install fine. I'm also running mdk > >>9.1 BTW. Any other ideas?? > [..] > > I believe you will find that certain contrib packages are not signed and > you will have to install without a signature, if you want the package. > When rpm reports a missing key, such as when you verify a package with > > rpm -K (package).rpm, > > you should be able to search around to find it. Various contributors > have their own gpg keys. There are public keyservers that *might* > contain the needed key or you could > > rpm -qp --changelog (package).rpm > > to see who contributed the package and search on the cooker archives for > clues to the sources of that key. For instance, Oden Eriksson packages > chkrootkit. You can find links to his key and that of Han Boetes, who > packages abcde, in the following post to cooker: > http://www.mail-archive.com/[EMAIL PROTECTED]/msg106798.html > > You can wget the file and > > gpg --import (file) > > as root. I don't have problems doing this from a su root commandline > but YMMV. See man gpg. > > Rolf
Rolf, You're right, but my understanding from Warly during the various beta and rc cycles was that anything in release contrib is resigned with MDK's sig before release. (at least there where a lot of people checking this point for him.) with cooker contrib yes... this is a problem. (and people are always noting bad sigs there.) However nothing new gets added to release contrib does it? It would seem that updates would go into update not straight into contrib. But maybe I'm mistaken. James > > > > ______________________________________________________________________ > > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
