Re: GPG keys are not correct for 'rhel7 x86_64 mondorescue Vanilla Packages'?
Bruno Cornec <[email protected]>
| Newsgroups | gmane.linux.mondo.devel |
|---|---|
| Message-ID | <[email protected]> |
KEINOS said on Tue, Jul 18, 2017 at 05:26:40PM +0900: >While installing 'Mondo Rescue' via `yum` into a fresh CentOS7, >I get a miss match error of GPG key for >'perl-ProjectBuilder-0.14.5-1.rhel7.noarch'. Well, I've changed my GPG Key (to comply with new requirements around GPG keys ans sha1 issues). So the new packages such as this new version of pb are signed with my ne key while the old stayed signed with the old key. >Is the repo's GPG (mondorescue.pubkey) file be the problem? or am I missing >something? In fact try to use the 2 .repo files, one for pb and the other for mondorescue as they should point to different key files (Cf: ftp://ftp.mondorescue.org/centos/7/x86_64/pb.repo and ftp://ftp.mondorescue.org/centos/7/x86_64/mondorescue.repo) that way you should point to the right keys for the right pkgs. But you need to use the right repo for each install. >My elder colleague says "It's been cracked so we shouldn't use it!", >but my guess is that 'perl-ProjectBuilder's GPG public key just isn't >up-to-date. Well not cracked as far as I know. Just perl-ProjectBuilder is more up to date in fact :-) All that will be solved when I'll publish 3.3.0 as all pkgs will have the new keys, that way yum won't have issues anymore. Bruno. -- HPE EMEA EG FLOSS Technology Strategist http://www.hpe.com/engage/opensource Open Source Profession, WW Linux Community Lead http://github.com/bcornec FLOSS projects: http://mondorescue.org http://project-builder.org Musique ancienne? http://www.musique-ancienne.org http://www.medieval.org ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot