FC3T2 up2date - <package> is not signed with a GPG signature

William Hooper whooperhsd3 at earthlink.net
Tue Sep 28 14:54:54 UTC 2004


Michael Jenkins said:
> When doing an up2date on a package, I get the following:
>
>
> [root at localhost /etc/sysconfig/rhn]$ up2date hdparm
[snip]
> Testing package set / solving RPM inter-dependencies...
> ########################################
> hdparm-5.7-2.i386.rpm:      ########################## Done.
> The package hdparm-5.7-2 is not signed with a GPG signature.  Aborting...
> Package hdparm-5.7-2 does not have a GPG signature.
> Aborting...

"Does not have a GPG signature"

>
> I've imported all these keys:

It doesnt' matter how may keys you have, the RPM isn't signed.

[snip]
> [root at localhost /var/spool/up2date]$ rpm -Kv hdparm-5.7-2.i386.rpm
> hdparm-5.7-2.i386.rpm:
> Header SHA1 digest: OK (0115990d6b8e85627bdf24a1f7f8f74627ea5a2b)
> MD5 digest: OK (9621b9025c6538da72605fade8d028ed)
> [root at localhost /var/spool/up2date]$ rpm --checksig hdparm-5.7-2.i386.rpm
> hdparm-5.7-2.i386.rpm: sha1 md5 OK

Compare this to an RPM that is signed.

[whooper at kenny up2date]$ rpm -Kv gtk2-2.4.7-2.6.i386.rpm
gtk2-2.4.7-2.6.i386.rpm:
    Header V3 DSA signature: OK, key ID 4f2a6fd2
    Header SHA1 digest: OK (f55f1f53230885c8b0308853b3d4680237192fe7)
    MD5 digest: OK (b680e27bb9697b7f1445085683c97557)
    V3 DSA signature: OK, key ID 4f2a6fd2
[whooper at kenny up2date]$ rpm --checksig gtk2-2.4.7-2.6.i386.rpm
gtk2-2.4.7-2.6.i386.rpm: (sha1) dsa sha1 md5 gpg OK

-- 
William Hooper




More information about the test mailing list