Some time ago, I posted about rpm throwing errors like this:

error: rpmdbNextIterator: skipping h#    1586 Header V3 DSA signature:
BAD, key ID 70771ff3

on any type of transaction I attempted. I've just found the solution. I
didn't realise that these key things expire after a period of time.
After much searching I found this message:

http://www.mail-archive.com/[EMAIL PROTECTED]/msg116035.html

which pretty much spells it out. The 3969e7de version of the mandrake
key is out of date. So, I got the current version of the keys from
Mandrake's primary mirror:

ftp://sunsite.uio.no/pub/unix/Linux/Mandrake/Mandrake-devel/cooker/i586/RPM-GPG-KEYS

and imported them with rpm --import RPM-GPG-KEYS. I was still left with
the problem though. Aside from which I'd done this before and I didn't
think it would solve the problem (it didn't). After a bit more digging I
found out that rpm 4.2 lists its keys as packages. Here's the list of
packages my machine had:

# rpm -qa --nosignature 'gpg-pub*'
gpg-pubkey-70771ff3-3969e7de
gpg-pubkey-70771ff3-3969e7de
gpg-pubkey-db42a60e-37ea5438
gpg-pubkey-70771ff3-3c8f768f
gpg-pubkey-caba22ae-3cf2c469

You'll notice that there are two versions of the 70771ff3 key, one of
which installed twice. So, all I had to do to fix this was to remove the
old version of the key. After a few failed attempts, this was the
magical incantation that achieved this deletion:

rpm -eva --allmatches gpg-pubkey-70771ff3-3969e7de

And all those errors went away!

gotcha: I thought the rpm package would ship with the keys I needed to
install packages of a similar vintage. Evidently not:

# gpg /usr/share/doc/rpm-4.2/RPM-GPG-KEY
pub  1024D/DB42A60E 1999-09-23 Red Hat, Inc <[EMAIL PROTECTED]>
sub  2048g/961630A2 1999-09-23 

Which is probably a Mandrake packaging bug. Though I guess that could be
argued either way.

I suppose I really should have fetched those keys over an SSL connection
from a signed source, but urpmi works again so I'm happy.

Hope someone finds this helpful.

James.


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to