-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi!
I experience the same kind of problems with smart.
First a question: For what purpose is /usr/lib/rpm/gnupg/pubring.gpg
actually used? I thought, rpm's known pubkeys were kept in
/var/lib/rpm/Pubkeys.
And then some details / observations which might be helpful:
1) I got the problem when installing libnjb-2.2.5-0.pm.0.i586.rpm
2) rpm -Kvp gives
/home/til/dl/libnjb-2.2.5-0.pm.0.i586.rpm:
Header V3 DSA signature: NOKEY, key ID 1be4d89e
Header SHA1 digest: OK (ed442fecc954084a7644577a74f93acdcbd78d90)
MD5 digest: OK (f9f69bf7291d4e8256e88282db614702)
V3 DSA signature: NOKEY, key ID 1be4d89e
3) Now the more interesting part: The attached keyfile contains the
required GPG pubkey 1be4d89e, as can be checked:
# gpg 1be4d89e.asc
pub 1024D/1BE4D89E 2003-05-20 Herbert Graeber <[EMAIL PROTECTED]>
uid Herbert Graeber <[EMAIL PROTECTED]>
sub 1024g/49B40391 2003-05-20
If I import the attached key into rpm
# rpm --import 1be4d89e.asc
And then check, if it's installed, I get:
# rpm -qi gpg-pubkey-1be4d89e
package gpg-pubkey-1be4d89e is not installed
But something was installed as I can check, when doing
# rpm -qi gpg-pubkey | less
and searching for "Graeber". I will find, that the very key was
installed as "gpg-pubkey-dcb8fafe-3eca9611"
# rpm -q gpg-pubkey-dcb8fafe
gpg-pubkey-dcb8fafe-3eca9611
That it is actually the same key can be verified such:
# rpm -qi gpg-pubkey-dcb8fafe | gpg
pub 1024D/1BE4D89E 2003-05-20 Herbert Graeber <[EMAIL PROTECTED]>
uid Herbert Graeber <[EMAIL PROTECTED]>
sub 1024g/49B40391 2003-05-20
4) My question: Can this confusion of the naming be the cause of the
problem? Or am I confusing something here? Is it related to the multiple
uid's?
# rpm -qi gpg-pubkey-dcb8fafe
only contains this email address:
Summary : gpg(Herbert Graeber <[EMAIL PROTECTED]>)
5) I noticed, that smart (or one of its children) imports the given
pubkey into "~root/.gnupg/pubring.gpg" instead of
"/usr/lib/rpm/gnupg/pubring.gpg".
Any hints or questions on details?
Tilman
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
iD8DBQFE6vJf9ZPu6Yae8lkRAiniAKCbgopqz25YbTyU1JcgnFh3bknV4wCghKvo
UwG6zo1tHgXM0tYjT88yDow=
=VQAs
-----END PGP SIGNATURE-----
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.2 (GNU/Linux)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=YWvf
-----END PGP PUBLIC KEY BLOCK-----