elfutils update signed with the test key

[Todd Zullinger]

Mike Cohler (mcohler) wrote:
> Bruno Wolff III wrote:
>> Every so often a package seems to slip in that's signed with
>> the updates-testing key. 
> 
> If anyone has a problem running their yum update then if the
> Fedora keys are imported using :
> rpm --import /etc/pki/rpm-gpg/*
>
> as root, then yum update will still work even though the packages
> are signed with the wrong key. If they already installed a package
> from updates-testing in the past the problem will be invisible.

While that's true, it isn't always a viable solution.  I generally
want to catch testing packages before they get installed on a system
that I don't want to use for testing.  It's not always easy to tell if
the package is in the wrong repo or if it's just been signed by the
wrong key.  :)

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Despite the high cost of living, it remains a popular item.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 542 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20070829/e649b1a3/attachment-0001.sig>