[packman] digests SIGNATURES NOT OK

2021-12-18 Diskussionsfäden S.
On Mon Dec 13 09:48:43 CET 2021 Marc Schiffbauer wrote: > * Giacomo Comes schrieb am 12.12.21 um 03:44 Uhr: > I have more information about the key problem. > > Some time ago the package rpm in opensuse was patched with > a pgp hardening changes from upstream (bsc#1185299) > This caused a

Re: [packman] digests SIGNATURES NOT OK

2021-12-13 Diskussionsfäden Carlos E. R.
On 13/12/2021 21.03, Stefan Seyfried wrote: Hi Marc, On 13.12.21 09:35, Marc Schiffbauer wrote: * Stefan Seyfried schrieb am 12.12.21 um 00:04 Uhr: ... But yes, signing a new key with the old one is a good idea. ...only if the tools (zypper, yast, rpm) actually accept this "new key

Re: [packman] digests SIGNATURES NOT OK

2021-12-13 Diskussionsfäden Stefan Seyfried
Hi Marc, On 13.12.21 09:35, Marc Schiffbauer wrote: * Stefan Seyfried schrieb am 12.12.21 um 00:04 Uhr: >> Really the best solution (if possible) would be if the new key could be signed by the old one and thus automatically accepted by zypper et al. I have no idea if this is even possible,

Re: [packman] digests SIGNATURES NOT OK

2021-12-13 Diskussionsfäden Marc Schiffbauer
* Giacomo Comes schrieb am 12.12.21 um 03:44 Uhr: > I have more information about the key problem. > > Some time ago the package rpm in opensuse was patched with > a pgp hardening changes from upstream (bsc#1185299) > This caused a problem with the current packman key. > However, the key itselt

Re: [packman] digests SIGNATURES NOT OK

2021-12-13 Diskussionsfäden Marc Schiffbauer
* Stefan Seyfried schrieb am 12.12.21 um 00:04 Uhr: > On 12.12.21 09:20, Marc Schiffbauer wrote: > > Hi Giacomo, > > > > we should really create a new gpg key for the repo. > > > > @Stefan: What do you think? > > Another Stefan here, but still ;-) > > Changing the key should be advertised in

Re: [packman] digests SIGNATURES NOT OK

2021-12-12 Diskussionsfäden Giacomo Comes
On Sun, Dec 12, 2021 at 11:55:33AM +0100, Carlos E. R. wrote: > On 12/12/2021 11.04, Stefan Seyfried wrote: > >On 12.12.21 09:20, Marc Schiffbauer wrote: > >>Hi Giacomo, > >> > >>we should really create a new gpg key for the repo. > >> > >>@Stefan: What do you think? > > > >Another Stefan here,

Re: [packman] digests SIGNATURES NOT OK

2021-12-12 Diskussionsfäden Stefan Botter
Hi Marc, Am Samstag, den 11.12.2021, 22:20 -1000 schrieb Marc Schiffbauer: > we should really create a new gpg key for the repo. > > @Stefan: What do you think? I am all for it! PMBS is not in the way, as you are re-signing all packages on the distribution host. As far as I understand, you have

Re: [packman] digests SIGNATURES NOT OK

2021-12-12 Diskussionsfäden Carlos E. R.
On 12/12/2021 11.04, Stefan Seyfried wrote: On 12.12.21 09:20, Marc Schiffbauer wrote: Hi Giacomo, we should really create a new gpg key for the repo. @Stefan: What do you think? Another Stefan here, but still ;-) Changing the key should be advertised in advance, in prominent places.

Re: [packman] digests SIGNATURES NOT OK

2021-12-12 Diskussionsfäden Stefan Seyfried
On 12.12.21 09:20, Marc Schiffbauer wrote: Hi Giacomo, we should really create a new gpg key for the repo. @Stefan: What do you think? Another Stefan here, but still ;-) Changing the key should be advertised in advance, in prominent places. Really the best solution (if possible) would be

Re: [packman] digests SIGNATURES NOT OK

2021-12-12 Diskussionsfäden Marc Schiffbauer
Hi Giacomo, we should really create a new gpg key for the repo. @Stefan: What do you think? -Marc * Giacomo Comes schrieb am 24.10.21 um 19:23 Uhr: > Hi, > On Leap 15.3 if I run: > rpm -K > the output is usually: > digests signatures OK > However if I do that with any rpm from the packman

[packman] digests SIGNATURES NOT OK

2021-10-24 Diskussionsfäden Giacomo Comes
Hi, On Leap 15.3 if I run: rpm -K the output is usually: digests signatures OK However if I do that with any rpm from the packman repository the output is: digests SIGNATURES NOT OK This was not happening before but it started recently after the package rpm was updated to version