Re: [Security-Discuss] Missing/Wrong gpg Keys

On Wed, 29 Dec 2004, Vincent Danen wrote:

>> Sisko:RPMS>rpm --checksig libqt3-3.2.3-19.5.100mdk.i586.rpm
>> libqt3-3.2.3-19.5.100mdk.i586.rpm: (SHA1) DSA sha1 md5 gpg NOT OK
> That keyid is for cooker.  Look at this:

Yes you are right!

The reson of this problem is: I've got no cooker pubkey in my rpm DB, 
because all of my PCs are installed from the official version.
and
only the *qt3* packages in updates/10.0/ are signed with the cooker key!

> Maybe a better solution would be to put the pubkey from cooker into updates; 
> then if things from community get copied over, this won't be seen as a 
> problem.

Yes. That's it!
But, if you  put the cooker key in updates/.../base/pubkey or
../media_info/pubkey* (or whereever it has to go in 10.1)
and I do an urpmi.update -f (or urpmi.removemedia, urpmi.addmedia)
solves this the problem?

So, is there a simple method to keep all the keys in the rpm DB 
uptodate or in sync for my 120 PCs?

All this probs didn't arise if you have the strict policy:

 	All packages in updates/ are sre signed by mandrake-sec only!

Thanks for the help!

mfg,jh

In case of mail-probs (Anti-SPAM-conf) mail to jholm-e4sNDE6/[email protected]

----------------- IT Physik / Universitaet Goettingen ------------------
  _______________________   ________.--'-`--._____  Tel:  +49 551 399363
|____==================_)  \_'===================` FAX:  +49 551 399263
        _,--___.-|__|-.______|=====/  `---'         Post: Dr. J. A. Holm
        `---------._          ~~~~~|                      Friedrich-Hund-Platz 1
                    `-._ -  -  - ,'                       37077 Goettingen
                        \_____,-'                         Deutschland
         PGP-Key:  http://www.Theorie.Physik.Uni-Goe.de/jh.html
                         "Tee. Earl Grey. Heiss!"

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________