Re: [Security-Discuss] Missing/Wrong gpg Keys

Hi,

I have to agree that I've been encountering the "INVALID KEY" problem, 
on Mandrake 10.1.

I'm not sure what causes it but it just is strange. I tried manually 
adding the keys from public key servers but, it still doesn't solve the 
problem.

Would some gpg/urpmi experts please take a peep?

Thank you!


Ronald Ip.

Juergen Holm wrote:
> Hi,
> 
> I'm new to this list, because of:
> 
> The updated packages *qt3*3.2.3-19.5.100mdk  for 10.0 are signed by 
> "Mandrake Linux KDE Team <kde-7Aj/b8uzpy6AmYF/[email protected]>" Key ID dd684d7a26752624
> but I don't find the public key.
> 
> Why isn't there a webfrontend to the MDK-Keyserver?
> Exist a MDK-keyserver? URL?
> 
> Is there a recommended list of gpg-keys that should be installed?
> Autoupdate with urpmi stopps for ever, if a key is missing! So,
> security Updates will not be installed. Example:
> 
> kerberos update isn't installed with: "urpmi --auto-select --auto" 
> because of
> /var/cache/urpmi/rpms/libqt3-3.2.3-19.5.100mdk.i586.rpm: Invalid 
> signature ((SHA1) DSA sha1 md5 gpg GPG#22458a98 NOT OK)
> 
> So, this is really a PROBLEM!
> 
> I suggest:
> Publish a list of gpg-Keys and do NOT allow packages in 
> Mandrakelinux/official/updates signed with other keys.
> 
> 
> Subscribing to this list may also be a problem, because the 
> "mandrakesecure.net" link on the bottom of 
> http://archives.mandrakelinux.com/ is dead!
> 
> mfg,jh
> 
> In case of mail-probs (Anti-SPAM-conf) mail to jholm-e4sNDE6/[email protected]
> 
> ----------------- IT Physik / Universitaet Goettingen ------------------
>  _______________________   ________.--'-`--._____  Tel:  +49 551 399363
> |____==================_)  \_'===================` FAX:  +49 551 399263
>        _,--___.-|__|-.______|=====/  `---'         Post: Dr. J. A. Holm
>        `---------._          ~~~~~|                      
> Friedrich-Hund-Platz 1
>                    `-._ -  -  - ,'                       37077 Goettingen
>                        \_____,-'                         Deutschland
>         PGP-Key:  http://www.Theorie.Physik.Uni-Goe.de/jh.html
>                         "Tee. Earl Grey. Heiss!"
> 
> 
> ------------------------------------------------------------------------
> 
> ____________________________________________________
> Want to buy your Pack or Services from MandrakeSoft? 
> Go to http://www.mandrakestore.com
> Join the Club : http://www.mandrakeclub.com
> ____________________________________________________

-- 
Ronald Ip                              myself-zSWdYiJ/+5RWk0Htik3J/[email protected]
gpg public key @ http://iphoting.iphoting.com/iphoting.asc
Fingerprint: {6A7E AB1E A822 E621 4DEC 11C4 F355 0635 71D7 1151}

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFB0U0M81UGNXHXEVERAhkAAJ96g0zvHBovwNrBOayPYkb8Vdu6mACdEvLb
zVK1D2nvnfR+YLBOrYxbim8=
=ncPd
-----END PGP SIGNATURE-----