Cannot upgrade libdvdcss after a recent upgrade push

[Temlakos]

Everyone:

This morning I received a notice that a new version of libdvdcss was 
available.

But when I tried to upgrade it, the upgrade choked on a problem with the 
GPG key.

Here is the output of "sudo dnf upgrade libdvdcss," redacted to remove 
references to my username:

>  Last metadata expiration check: 2:03:45 ago on Sat 10 Feb 2018 
>  06:32:25 AM EST.
>  Dependencies resolved.
>
> =============================================================================================================================================================================================================================================
>   Package Arch Version 
>  Repository                                            Size
>
> =============================================================================================================================================================================================================================================
>  Upgrading:
>   libdvdcss x86_64 1.4.1-1.fc27.remi 
>  livna                                                 71 k
>
>  Transaction Summary
>
> =============================================================================================================================================================================================================================================
>  Upgrade  1 Package
>
>  Total size: 71 k
>  Is this ok [y/N]: y
>  Downloading Packages:
>  [SKIPPED] libdvdcss-1.4.1-1.fc27.remi.x86_64.rpm: Already downloaded
>  warning: 
>  /var/cache/dnf/livna-cec64278843bd06c/packages/libdvdcss-1.4.1-1.fc27.remi.x86_64.rpm: 
>  Header V4 RSA/SHA256 Signature, key ID 0364b949: NOKEY
>  Importing GPG key 0xA109B1EC:
>   Userid     : "Livna.org rpms <rpm-key(a)livna.org&gt;&quot;
>   Fingerprint: 037B 5D9B E1B6 B673 2A23 13B5 7129 5441 A109 B1EC
>   From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-livna
>  Is this ok [y/N]: y
>  Key imported successfully
>  Import of key(s) didn't help, wrong key(s)?
>  Public key for libdvdcss-1.4.1-1.fc27.remi.x86_64.rpm is not 
>  installed. Failing package is: libdvdcss-1.4.1-1.fc27.remi.x86_64
>   GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-livna
>  The downloaded packages were saved in cache until the next successful 
>  transaction.
>  You can remove cached packages by executing 'dnf clean packages'.
>  Error: GPG check FAILED
>  [username@hostname ~]$ 
All right, so it's the wrong key. Now how and where do I get the /right/ 
key?

Temlakos

[Ed Greshko]

On 02/10/18 22:21, Temlakos wrote:
>  Everyone:
>
>  This morning I received a notice that a new version of libdvdcss was available.
>
>  But when I tried to upgrade it, the upgrade choked on a problem with the GPG key.
>  
Note the repository is "livna".   This is not a repository for which the Fedora
Community has responsibility.

So, contact the "livna" folks.

 
>  Here is the output of "sudo dnf upgrade libdvdcss," redacted to remove
> references
>  to my username:
>
> > Last metadata expiration check: 2:03:45 ago on Sat 10 Feb 2018 06:32:25 AM EST.
> > Dependencies resolved.
> >
> =============================================================================================================================================================================================================================================
> >  Package                                                 
> > Arch                                                 
> > Version                                                          
> > Repository                                            Size
> >
> =============================================================================================================================================================================================================================================
> > Upgrading:
> >  libdvdcss                                               
> > x86_64                                               
> > 1.4.1-1.fc27.remi                                                
> > livna                                                 71 k
> >
> > Transaction Summary
> >
> =============================================================================================================================================================================================================================================
> > Upgrade  1 Package
> >
> > Total size: 71 k
> > Is this ok [y/N]: y
> > Downloading Packages:
> > [SKIPPED] libdvdcss-1.4.1-1.fc27.remi.x86_64.rpm: Already
> >
> downloaded                                                                                                                                                                      
> >  
> > warning:
> >
> /var/cache/dnf/livna-cec64278843bd06c/packages/libdvdcss-1.4.1-1.fc27.remi.x86_64.rpm:
> > Header V4 RSA/SHA256 Signature, key ID 0364b949: NOKEY
> > Importing GPG key 0xA109B1EC:
> >  Userid     : "Livna.org rpms <rpm-key(a)livna.org&gt;&quot;
> >  Fingerprint: 037B 5D9B E1B6 B673 2A23 13B5 7129 5441 A109 B1EC
> >  From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-livna
> > Is this ok [y/N]: y
> > Key imported successfully
> > Import of key(s) didn't help, wrong key(s)?
> > Public key for libdvdcss-1.4.1-1.fc27.remi.x86_64.rpm is not installed. Failing
> > package is: libdvdcss-1.4.1-1.fc27.remi.x86_64
> >  GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-livna
> > The downloaded packages were saved in cache until the next successful transaction.
> > You can remove cached packages by executing 'dnf clean packages'.
> > Error: GPG check FAILED
> > [username@hostname ~]$
>
>  All right, so it's the wrong key. Now how and where do I get the /right/ key?
>
>  Temlakos
>
>
>
>  _______________________________________________
>  users mailing list -- users(a)lists.fedoraproject.org
>  To unsubscribe send an email to users-leave(a)lists.fedoraproject.org 

-- 
A motto of mine is: When in doubt, try it out

[Temlakos]

On 02/10/2018 09:50 AM, Ed Greshko wrote:
>  On 02/10/18 22:21, Temlakos wrote:
> > Everyone:
> >
> > This morning I received a notice that a new version of libdvdcss was available.
> >
> > But when I tried to upgrade it, the upgrade choked on a problem with the GPG key.
> >
>  Note the repository is "livna".   This is not a repository for which the
> Fedora
>  Community has responsibility.
>
>  So, contact the "livna" folks.
>  
I think you mean to suggest to bring it to the RPM Fusion list. They 
confirmed to me that they are the place to discuss all things Livna. 
They managed to solve my problem, by the way.

Temlakos

[Samuel Sieb]

On 02/10/2018 10:46 AM, Temlakos wrote:
>  I think you mean to suggest to bring it to the RPM Fusion list. They
>
>  confirmed to me that they are the place to discuss all things Livna. 
>  They managed to solve my problem, by the way. 
Could you say how that was solved?  I'm trying to figure out why there's 
a new package there signed by an unknown key.

[Temlakos]

On 02/10/2018 05:02 PM, Samuel Sieb wrote:
>  On 02/10/2018 10:46 AM, Temlakos wrote:
> > I think you mean to suggest to bring it to the RPM Fusion list. They 
> > confirmed to me that they are the place to discuss all things Livna. 
> > They managed to solve my problem, by the way.
>
>  Could you say how that was solved?  I'm trying to figure out why 
>  there's a new package there signed by an unknown key.  
The problem is: the Livna repository is supposed to be dead. Another 
user named Remi is maintaining the one remaining package that RPM Fusion 
didn't take over (and likely put into its Nonfree and Ugly repos). 
Anyway, someone gave me this pathway to the proper key:

https://rpms.remirepo.net/RPM-GPG-KEY-remi2017

So: execute

sudo rpm --import https://rpms.remirepo.net/RPM-GPG-KEY-remi2017

to verify the signature on future updates of this package.

The package doesn't see updates too often. But it did this morning.

Temlakos

[Samuel Sieb]

On 02/10/2018 02:12 PM, Temlakos wrote:
>  The problem is: the Livna repository is supposed to be dead. Another
>
>  user named Remi is maintaining the one remaining package that RPM Fusion 
>  didn't take over (and likely put into its Nonfree and Ugly repos). 
>  Anyway, someone gave me this pathway to the proper key: 
rpmfusion didn't want to have that one in their repo either, that's why 
when the merge happened, that one was left alone at livna.

>  https://rpms.remirepo.net/RPM-GPG-KEY-remi2017
>  
>  So: execute
>  
>  sudo rpm --import https://rpms.remirepo.net/RPM-GPG-KEY-remi2017
>  
>  to verify the signature on future updates of this package.
>  
>  The package doesn't see updates too often. But it did this morning. 
Remi is most known for the php packages he maintains, but I just found 
out that libdvdcss is also in his repo now.  It's nice to find out 
there's an update since it always feels a bit weird to be installing a 
F17 package on new installs and every time I wonder when it will stop 
working because of library changes. :-)