PGP problems with RH9 and YUM

[Paul W. Frields]

On Tue, 2004-07-27 at 14:52, Maurice wrote:
[...snip...]
> I did the rpm --import for these KEYS: 
> rpm --import http://www.fedoralegacy.org/FEDORA-LEGACY-GPG-KEY
> rpm --import /usr/share/doc/redhat-release-9/RPM-GPG-KEY 
> 
> I've done several yum clean. 
> 
> Here is the console text: 
> 
> [root at penguin2 root]# yum update 
> Gathering header information file(s) from server(s) 
> Server: Fedora Linux / stable for Red Hat Linux 9 (i386) 
> Server: Macromedia Flash Player for Red Hat Linux 9 
> Server: Red Hat Linux 9 (i386) 
> Server: Red Hat Linux 9 (i386) updates 
> Finding updated packages 
> Downloading needed headers 
> Resolving dependencies 
> Dependencies resolved 
> I will do the following: 
> [update: gkrellm 2.1.19-0.fdr.1.rh90.i386] 
> [update: dia 1:0.91-0.fdr.5.i386] 
> [update: cvs 1.11.2-23.legacy.i386] 
> [update: mailman 3:2.1.1-7.legacy.i386] 
> [update: perl-DateManip 5.42-0.fdr.2.a.rh90.noarch] 
> [update: xchat 1:2.0.4-0.fdr.1.rh90.i386] 
> [update: nmap 2:3.30-0.fdr.1.rh90.i386] 
> [update: sysklogd 1.4.1-14.legacy.9.i386] 
> [update: nmap-frontend 2:3.30-0.fdr.1.rh90.i386] 
> Is this ok [y/N]: y 
> Getting gkrellm-2.1.19-0.fdr.1.rh90.i386.rpm 
> warning: rpmts_HdrFromFdno: V3 DSA signature: NOKEY, key ID 8df56d05 
> Error: Could not find the GPG Key necessary to validate pkg
> /var/cache/yum/fedora-stable/packages/gkrellm-2.1.19-0.fdr.1.rh90.i386.rpm 
> Error: You may want to run yum clean or remove the file: 
> /var/cache/yum/fedora-stable/packages/gkrellm-2.1.19-0.fdr.1.rh90.i386.rpm 
> Error: You may also check that you have the correct GPG keys installed
[...snip...]

The packages in question are signed by a key you don't have in your RPM
database, just as the error says. It reports the package in question is
signed by the key with ID 8df56d05. If you do:

  rpm -qa gpg-pubkey

...you'll get a list of all GPG keys in your RPM database. If you don't
see "gpg-pubkey-8df56d05-xxxxxxxx" in that list, you've found the
problem. The next problem becomes, where do you find that key? I did a
couple minutes snooping at fedora.us to find out that the key in
question is the Fedora Project key. To import their key:

  rpm --import http://www.fedora.us/FEDORA-GPG-KEY

-- 
Paul W. Frields, RHCE