Re: [Security-Discuss] rpm gpg key fails

Vincent Danen <vdanen-4qZELD6FgxhWk0Htik3J/[email protected]> Sat, 20 May 2006 09:57:51 -0600
Newsgroups gmane.linux.mandrake.security.general
Organization Mandriva
Message-ID <[email protected]>
* Ritesh Khadgaray <[email protected]> [2006-05-20 04:55:26 +0530]:

> * I have recently install mandriva cooker. When i try to checksignature for
> any rpm, it fails.

You really should ask this on the cooker list.

> #rpm --checksig /var/cache/urpmi/rpms/nautilus-actions-1.2-1mdk.i586.rpm
> /var/cache/urpmi/rpms/nautilus-actions-1.2-1mdk.i586.rpm: (SHA1) DSA sha1
> md5 (GPG) NOT OK (MISSING KEYS: GPG#26752624)
> 
> 
> * I have tried importing RPG gpg key, It does not import GPG#26752624.
> 
> #rpm --import /usr/share/doc/rpm-4.4.5/RPM-GPG-KEY
> # rpm -q gpg-pubkey-\*
> gpg-pubkey-cba29bf9-31295e35
> gpg-pubkey-db42a60e-37ea5438
> 
> 
> *  I have downloaded the rpm key from
> http://www.mandriva.com/security/rpm_gpg_keys, and upon try to import it.
> 
> # rpm  --import RPM-GPG-KEYS
> error: RPM-GPG-KEYS: import read failed(0).
> 
> * For the heck of it, tried importing with gpg
> 
> gpg --import RPM-GPG-KEYS
> gpg: directory `/root/.gnupg' created
> gpg: new configuration file `/root/.gnupg/gpg.conf' created
> gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during
> this run
> gpg: keyring `/root/.gnupg/secring.gpg' created
> gpg: keyring `/root/.gnupg/pubring.gpg' created
> gpg: CRC error; 709E7C - AC2A78
> gpg: [don't know]: invalid packet (ctb=34)
> gpg: read_block: read error: invalid packet
> gpg: import from `RPM-GPG-KEYS' failed: invalid keyring
> 
> 
> * am i missing something. gpg key attached.

Looks like the key is corrupt?  If gpg can't import it, then I suspect
it's damaged in some way.

I'd ask on cooker about this... could be a known problem.

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}
Wasting time like it was free...
signature.asc (application/pgp-signature, 186 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFEbzx/LrxeMv7jCtQRAszaAJ49DOXg4EDf4WKYUT0tP9W1Fhs0cwCghRgI
uii5Z3+0+LeMl5SDFFMj8JU=
=mpkl
-----END PGP SIGNATURE-----