GPG key signature discrepancy

Will Bending whb001 at shsu.edu
Thu Sep 30 16:04:43 UTC 2004


I have noticed that the following packages for rh 9 are using a non
Fedora-Legacy GPG key signature:

Name                                Arch   Version                  Repo
--------------------------------------------------------------------------------
ethereal                            i386   0.10.3-0.90.4.legacy    
updates-fedoralegacy

rsync                               i386   2.5.7-2.legacy.9        
updates-fedoralegacy


Here is a sample:

[root at someboxonmynetwork /]# rpm -qip
/var/cache/yum/updates-fedoralegacy/packages/rsync-2.5.7-2.legacy.9.i386.rpm
warning:
/var/cache/yum/updates-fedoralegacy/packages/rsync-2.5.7-2.legacy.9.i386.rpm: V3 DSA signature: NOKEY, key ID 731002fa
Name        : rsync                        Relocations: /usr
Version     : 2.5.7                             Vendor: Fedora Legacy
Release     : 2.legacy.9                    Build Date: Tue 28 Sep 2004
06:37:59 PM CDT
Install Date: (not installed)               Build Host:
jane.fedoralegacy.org
Group       : Applications/Internet         Source RPM:
rsync-2.5.7-2.legacy.9.src.rpm
Size        : 277714                           License: GPL
Signature   : DSA/SHA1, Tue 28 Sep 2004 06:48:02 PM CDT, Key ID
108c4512731002fa
Packager    : Marc Deslauriers <marcdeslauriers at videotron.ca>
Summary     : A program for synchronizing files over a network.

Here's the one I imported a while back from the FC Legacy project:

[root at someboxonmynetwork /]# rpm -qa gpg-pubkey*
gpg-pubkey-db42a60e-37ea5438

I'm holding off on installing them at this time because of this.
Just thought you'd want to be informed of it.

Thanks, 

--will

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20040930/159fba19/attachment.sig>


More information about the fedora-legacy-list mailing list