APT and GPG signature

[runlevel0]

Hi Fedorians,

I'm a recent migrator from Debian and have had some trouble
with signature verification using apt.
I get an Illegal/Unknown key complaint from apt.

I know apt-deb quite well and looking in /etc/apt y found a dir called
gpg where some keys are stored.

I imported al necessary keys from the keyservers into my keyring, but
this doesn't seem to work with apt and the man page does not make me any
wiser as it is the good ol' Debian apt manpage.

Should I simply copy the keys from my keyring or the download sites into
/etc/apt/gpg or is there any means todo this in a 'civilized' manner?

I can remember that as I was using an older RH distro I was able to
deactivate gpg verification, but one of the points which made me migrate
to Fedora was actually this option and disabling it is not a choice for
me.

Regards,

P.D.: I really *love* this damn distro.

[Alexandre Strube]

Em Sex, 2004-02-27 às 13:31, runlevel0 escreveu:
> Hi Fedorians,
>
> I'm a recent migrator from Debian and have had some trouble
> with signature verification using apt.
> I get an Illegal/Unknown key complaint from apt.
>
> I know apt-deb quite well and looking in /etc/apt y found a dir called
> gpg where some keys are stored.
>
> I imported al necessary keys from the keyservers into my keyring, but
> this doesn't seem to work with apt and the man page does not make me any
> wiser as it is the good ol' Debian apt manpage.
>
> Should I simply copy the keys from my keyring or the download sites into
> /etc/apt/gpg or is there any means todo this in a 'civilized' manner?

There are rpms for gpg keys...

Sendmail required?

[Steve Berry]

I noticed severe lag time in sendmail at boot. so I disabled it.

is this going to interfere with anything..

this is a desktop box, I can't imagine there's any dep's requiring
sendmail, and so far nothing has complained.

If I do require it, how can I speed it's load time?

I presume something with network config.

Sendmail required?

[William Hooper]

Steve Berry said:
> I noticed severe lag time in sendmail at boot. so I disabled it.

Probably a name resolution issue.  What does your /etc/hosts look like?
> is this going to interfere with anything..

Well for one you won't get Logwatch or cron mails.

Sendmail required?

[Steve Berry]

# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1       ZiRCON  localhost
192.168.0.1     Router  Router

On Fri, 2004-02-27 at 22:24, William Hooper wrote:
> Steve Berry said:
> > I noticed severe lag time in sendmail at boot. so I disabled it.
>
> Probably a name resolution issue.  What does your /etc/hosts look like?
> > is this going to interfere with anything..
>
> Well for one you won't get Logwatch or cron mails.
>
> -- 
> William Hooper

Sendmail required?

[William Hooper]

Steve Berry said:
> # Do not remove the following line, or various programs
> # that require network functionality will fail.
> 127.0.0.1       ZiRCON  localhost
> 192.168.0.1     Router  Router

"ZiRCON" isn't fully qualified.  Either a) add your domain or b) add
localdomain

127.0.0.1 ZiRCON.localdomain ZiRCON localhost localhost.localdomain

That should do the trick.  Also, having Router in there twice shouldn't be
needed.

Sendmail required?

[Javier Perez]

> -----Original Message-----
> From: [e-mail]
> [mailto:[e-mail]]On Behalf Of William Hooper
> Sent: Viernes, 27 de Febrero de 2004 11:19 p.m.
> To: [e-mail]
> Subject: Re: Sendmail required?
>
> Steve Berry said:
> > # Do not remove the following line, or various programs
> > # that require network functionality will fail.
> > 127.0.0.1       ZiRCON  localhost
> > 192.168.0.1     Router  Router
>
> "ZiRCON" isn't fully qualified.  Either a) add your domain or b) add
> localdomain
>
> 127.0.0.1 ZiRCON.localdomain ZiRCON localhost localhost.localdomain
>
> That should do the trick.  Also, having Router in there twice shouldn't be
> needed.
>
> --
> William Hooper

Sorry, I am Newbie with the same problem.
is the .localdomain textual or is can it be any made up name?

I have a small 2 computer dial up setup at home and I have
always wondered if it is really necessary to have a domain.

I wondered always if like with the 192.168.x.x public
net addersses there is a similar "public" domain that I could
set up my home computers to in order not to conflict with the
larger Internet at large.

Javier
> --
> fedora-list mailing list
> [e-mail]
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

Sendmail required?

[William Hooper]

Javier Perez said:
> Sorry, I am Newbie with the same problem.
> is the .localdomain textual or is can it be any made up name?

Preferably it is either a reserved name (which I believe is .localdomain,
but I haven't looked up the RFC) or a domain name you control (so that it
will resolve correctly to the machines you want it to).
> I have a small 2 computer dial up setup at home and I have
> always wondered if it is really necessary to have a domain.

"Necessary" is in they eye of the beholder.  You could use "microsoft.com"
if you wanted to, assuming you were running an internal DNS server that
your machines point to.  Of course you would have problems getting to the
real "microsoft.com".  With domain names running in the tens of dollars
per year I would get one just as an e-mail forwarder if nothing else. 
Then if you decide to put up a web site you already have the domain.
> I wondered always if like with the 192.168.x.x public
> net addersses there is a similar "public" domain that I could
> set up my home computers to in order not to conflict with the
> larger Internet at large.

I think you mean "private" as in those IPs will not conflict with the
Internet at large.

Sendmail required?

[Jonathan Ryshpan]

Also check resolv.conf to be sure that the resolver is checking
/etc/hosts, or that you are close to your nameserver.

On Fri, 2004-02-27 at 19:24, William Hooper wrote:
> Steve Berry said:
> > I noticed severe lag time in sendmail at boot. so I disabled it.
>
> Probably a name resolution issue.  What does your /etc/hosts look like?
> > is this going to interfere with anything..
>
> Well for one you won't get Logwatch or cron mails.

Sendmail required?

[Lars Kellogg-Stedman]

Steve Berry wrote:
> I noticed severe lag time in sendmail at boot. so I disabled it.

Long load time for sendmail often means that host resolution is not 
working properly on your box.  Sendmail wants to know the fully 
qualified name and address of your system, which generally means:

(a) HOSTNAME in /etc/sysconfig/network is fully qualified, and
(b) There is a corresponding entry in /etc/hosts.

There are other ways to resolve this problem, but this is usually the 
simplest.

-- lars

[Brian Ashe]

On Friday 27 February 2004 11:31, runlevel0 wrote:
> Hi Fedorians,
>
> I'm a recent migrator from Debian and have had some trouble
> with signature verification using apt.
> I get an Illegal/Unknown key complaint from apt.
>
> I know apt-deb quite well and looking in /etc/apt y found a dir called
> gpg where some keys are stored.
>
> I imported al necessary keys from the keyservers into my keyring, but
> this doesn't seem to work with apt and the man page does not make me any
> wiser as it is the good ol' Debian apt manpage.
>
> Should I simply copy the keys from my keyring or the download sites into
> /etc/apt/gpg or is there any means todo this in a 'civilized' manner?

It may be rpm that is complaining and not apt. You may need to import those 
keys into rpm via...

rpm --import [ /path/to/keyfile | http://site.with.key/keyfile.ext ]

example to get Freshrpm's key from their site...
rpm --import http://freshrpms.net/packages/RPM-GPG-KEY.txt

HTH.

[runlevel0]

El vie, 27-02-2004 a las 18:17, Brian Ashe escribió:
> It may be rpm that is complaining and not apt. You may need to import those 
> keys into rpm via...
>
> rpm --import [ /path/to/keyfile | http://site.with.key/keyfile.ext ]
>
> example to get Freshrpm's key from their site...
> rpm --import http://freshrpms.net/packages/RPM-GPG-KEY.txt

Astonishing.

I will have to read the rpm manpage in dept.
Really cool feature, this one.

Thanks a lot.