GPG keys are not correct for 'rhel7 x86_64 mondorescue Vanilla Packages'?

Hi,

While installing 'Mondo Rescue' via `yum` into a fresh CentOS7,
I get a miss match error of GPG key for
'perl-ProjectBuilder-0.14.5-1.rhel7.noarch'.

> The GPG keys listed for the "rhel 7 x86_64 - mondorescue Vanilla
Packages"
> repository are already installed but they are not correct for this
package.
> Check that the correct key URLs are configured for this repository.
>
>  Failing package is: perl-ProjectBuilder-0.14.5-1.rhel7.noarch
>  GPG Keys are configured as:
>    ftp://ftp.mondorescue.org//rhel/7/x86_64/mondorescue.pubkey

Same thing happens even with the mirror server.

I checked the Wiki and the forums. And there were similar ones a few years
ago and were all closed issue by configuring FTP settings by the
repository's admin.

Is the repo's GPG (mondorescue.pubkey) file be the problem? or am I missing
something?

My elder colleague says "It's been cracked so we shouldn't use it!",
but my guess is that 'perl-ProjectBuilder's GPG public key just isn't
up-to-date.

So I decided to email here for an advice.

As an information,
if I install individually the 'perl-ProjectBuilder-0.14.5-1.rhel7.noarch'
 via `rpm`,
and then installing 'Mondo Rescue' via `yum`, it installs with no problem.

The logs and detail infos are below.

Thanks,
KEINOS
--------------------------------------------------------

[OS: ]
RedHat/CentOS 7.3.1611 Core, Vanilla

[ERROR: ]
Retrieving key from
ftp://ftp.mondorescue.org//rhel/7/x86_64/mondorescue.pubkey
Importing GPG key 0x37DB9883:
 Userid     : "Bruno Cornec (primary address) <[email protected]>"
 Fingerprint: 54aa 7ada 8c6b 0f5d 51c7 5dc0 141b 9ff2 37db 9883
 From       : ftp://ftp.mondorescue.org//rhel/7/x86_64/mondorescue.pubkey
Is this ok [y/N]: y
warning:
/var/cache/yum/x86_64/7/mondorescue/packages/perl-ProjectBuilder-0.14.5-1.rhel7.noarch.rpm:
Header V4 RSA/SHA512 Signature, key ID 20ebfb0e: NOKEY
Retrieving key from
ftp://ftp.mondorescue.org//rhel/7/x86_64/mondorescue.pubkey


The GPG keys listed for the "rhel 7 x86_64 - mondorescue Vanilla Packages"
repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.


 Failing package is: perl-ProjectBuilder-0.14.5-1.rhel7.noarch
 GPG Keys are configured as:
ftp://ftp.mondorescue.org//rhel/7/x86_64/mondorescue.pubkey
[/ERROR]

[Steps that I took (as a root usr) : ][HERE]

yum -y update
cd /etc/yum.repos.d/
wget ftp://ftp.mondorescue.org/rhel/7/x86_64/mondorescue.repo
yum --enablerepo=mondorescue install mondo

[/HERE]

[Full log of the steps: ] ( I uploaded it to Gist )
https://gist.github.com/KEINOS/44bfac33d658843c95fcdc8fa57eb75f#file-20170718-1-error-full-log

[Other log files: ]
/var/log/mondoarchive.log :  n/a (not created)
/var/log/mindi.log :  n/a (not created)

[Other sites ( repo mirror) that failed also: ]
ftp://mondo.mirror.pclark.com/pub/mondorescue/rhel/7/x86_64/mondorescue.repo

[Steps that worked: ][HERE]

cd ~/
yum -y update
wget
ftp://ftp.mondorescue.org/rhel/7/x86_64/perl-ProjectBuilder-0.14.5-1.rhel7.noarch.rpm
rpm -ivh perl-ProjectBuilder-0.14.5-1.rhel7.noarch.rpm

cd /etc/yum.repos.d/
wget ftp://ftp.mondorescue.org/rhel/7/x86_64/mondorescue.repo
yum --enablerepo=mondorescue install mondo

[/HERE]

EOF;

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Mondo-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mondo-devel