fc7, updates are not signed

[Kevin DeKorte]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've tried to grab the fc7 updates this morning and
firefox-2.0.0.4-1.fc7.i386.rpm is not signed as well as a few others.

Makes doing an upgrade rather difficult. Especially, after trying
several times to even grab the files.

Kevin

Get my public GnuPG key from
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x7D0BD5D1
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
> Comment: Using GnuPG with Remi - http://enigmail.mozdev.org
>
> iD8DBQFGYD3m6w2kMH0L1dERAud6AJ9R4AwI5Iha/EQs9ZR3LqL6XtFngACcDAgw
> 0Kym7aoVW9RpoFPqizKoc9c=
> =WYpL
> -----END PGP SIGNATURE-----

[Jesse Keating]

On Friday 01 June 2007 11:40:22 Kevin DeKorte wrote:
> I've tried to grab the fc7 updates this morning and
> firefox-2.0.0.4-1.fc7.i386.rpm is not signed as well as a few others.
>
> Makes doing an upgrade rather difficult. Especially, after trying
> several times to even grab the files.

We're working on it.  I do believe yum now has a cli option to disable gpg 
sigs.

[Janina Sajka]

Kevin DeKorte writes:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I've tried to grab the fc7 updates this morning and
> firefox-2.0.0.4-1.fc7.i386.rpm is not signed as well as a few others.

Not so. I believe your problem is that you need to rpm --import GPG
keys. Here's output re firefox-2.0.0.4 which I installed without
incident via yum upgrade early this morning on my F7:

rpm -qip firefox-2.0.0.4-1.fc7.i386.rpm
Name        : firefox                      Relocations: (not
relocatable)
Version     : 2.0.0.4                           Vendor: Fedora Project
Release     : 1.fc7                         Build Date: Thu 31 May 2007
12:01:08 AM EDT
Install Date: (not installed)               Build Host:
hammer2.fedora.redhat.com
Group       : Applications/Internet         Source RPM:
firefox-2.0.0.4-1.fc7.src.rpm
Size        : 41384176                         License: MPL/LGPL
Signature   : (none)
Packager    : Fedora Project
URL         : http://www.mozilla.org/projects/firefox/
Summary     : Mozilla Firefox Web browser.
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
root@fantasia 23:10 packages#

[Ian Pilcher]

Janina Sajka wrote:
> Kevin DeKorte writes:
> > I've tried to grab the fc7 updates this morning and
> > firefox-2.0.0.4-1.fc7.i386.rpm is not signed as well as a few others.
>
> Not so. I believe your problem is that you need to rpm --import GPG
> keys. Here's output re firefox-2.0.0.4 which I installed without
> incident via yum upgrade early this morning on my F7:

I doubt Kevin would miss that, particularly since yum prompts you to
import the key.  There definitely were some unsigned update packages
out there on Thursday; appears to have been fixed.