RedHat updates and unknown GPG signature

pierre_stephane.baton at alcatelaleniaspace.com pierre_stephane.baton at alcatelaleniaspace.com
Fri Sep 8 12:02:57 UTC 2006


I just downloaded bind package with up2date, theses are my checks after 
updating.

You should send the faulty rpm to RedHat if you can't find the mater.

Could you give output of rpm -vv -K ? (particulary Expected and actual 
size).










[root at hostname ~]# rpm -qa gpg-pubkey*
gpg-pubkey-db42a60e-37ea5438

[root at hostname ~]# cd /var/spool/up2date/

[root at hostname up2date]# ls bind-*
bind-9.2.4-16.EL4.x86_64.hdr         bind-devel-9.2.4-16.EL4.x86_64.hdr 
bind-libs-9.2.4-16.EL4.x86_64.hdr
bind-9.2.4-16.EL4.x86_64.rpm         bind-devel-9.2.4-16.EL4.x86_64.rpm 
bind-libs-9.2.4-16.EL4.x86_64.rpm
bind-chroot-9.2.4-16.EL4.x86_64.hdr  bind-libs-9.2.4-16.EL4.i386.hdr 
bind-utils-9.2.4-16.EL4.x86_64.hdr
bind-chroot-9.2.4-16.EL4.x86_64.rpm  bind-libs-9.2.4-16.EL4.i386.rpm 
bind-utils-9.2.4-16.EL4.x86_64.rpm

[root at hostname up2date]# rpm -K bind-9.2.4-16.EL4.x86_64.rpm
bind-9.2.4-16.EL4.x86_64.rpm: (sha1) dsa sha1 md5 gpg OK

[root at hostname up2date]# rpm -v -K bind-9.2.4-16.EL4.x86_64.rpm
bind-9.2.4-16.EL4.x86_64.rpm:
    Header V3 DSA signature: OK, key ID db42a60e
    Header SHA1 digest: OK (ad5f9c126a40e4780356d45228f5593a24d7f7c7)
    MD5 digest: OK (8eeaddb3928b4a92de27ffa56db1dcc6)
    V3 DSA signature: OK, key ID db42a60e

[root at hostname up2date]# rpm -vv -K bind-9.2.4-16.EL4.x86_64.rpm
D: Expected size:       608658 = lead(96)+sigs(344)+pad(0)+data(608218)
D:   Actual size:       608658
D: opening  db environment /var/lib/rpm/Packages joinenv
D: opening  db index       /var/lib/rpm/Packages rdonly mode=0x0
D: locked   db index       /var/lib/rpm/Packages
D: opening  db index       /var/lib/rpm/Pubkeys rdonly mode=0x0
D:  read h#    1576 Header sanity check: OK
D: ========== DSA pubkey id 219180cddb42a60e
bind-9.2.4-16.EL4.x86_64.rpm:
    Header V3 DSA signature: OK, key ID db42a60e
    Header SHA1 digest: OK (ad5f9c126a40e4780356d45228f5593a24d7f7c7)
    MD5 digest: OK (8eeaddb3928b4a92de27ffa56db1dcc6)
    V3 DSA signature: OK, key ID db42a60e
D: closed   db index       /var/lib/rpm/Pubkeys
D: closed   db index       /var/lib/rpm/Packages
D: closed   db environment /var/lib/rpm/Packages

In my /etc/sysconfig/rhn/up2date file :

useNoSSLForPackages[comment]=Use the noSSLServerURL for package, package 
list, and header fetching
useNoSSLForPackages=0

storageDir[comment]=Where to store packages and other data when they are 
retrieved
storageDir=/var/spool/up2date

useGPG[comment]=Use GPG to verify package integrity
useGPG=1

noSSLServerURL[comment]=Remote server URL without SSL
noSSLServerURL=http://xmlrpc.rhn.redhat.com/XMLRPC

serverURL[comment]=Remote server URL
serverURL=https://xmlrpc.rhn.redhat.com/XMLRPC




[root at sdmlx03 up2date]# rpm -vv -qi gpg-pubkey-db42a60e-37ea5438
D: opening  db environment /var/lib/rpm/Packages joinenv
D: opening  db index       /var/lib/rpm/Packages rdonly mode=0x0
D: locked   db index       /var/lib/rpm/Packages
D: opening  db index       /var/lib/rpm/Name rdonly mode=0x0
D:  read h#    1576 Header sanity check: OK
Name        : gpg-pubkey                   Relocations: (not relocatable)
Version     : db42a60e                          Vendor: (none)
Release     : 37ea5438                      Build Date: Tue 01 Aug 2006 
08:03:47 AM CEST
Install Date: Tue 01 Aug 2006 08:03:47 AM CEST      Build Host: localhost
Group       : Public Keys                   Source RPM: (none)
Size        : 0                                License: pubkey
Signature   : (none)
Summary     : gpg(Red Hat, Inc <security at redhat.com>)
Description :
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.3.3 (beecrypt-3.0.0)
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=3AHZ
-----END PGP PUBLIC KEY BLOCK-----

D: closed   db index       /var/lib/rpm/Name
D: closed   db index       /var/lib/rpm/Packages
D: closed   db environment /var/lib/rpm/Packages

________________________________
Pierre-Stéphane BATON
DI - OI/IT
Consultant Trasys-OSI
Support informatique Unix/Linux
E01-H14-L44 - Tel :+32 (0)71 442797

Alcatel Alenia Space ETCA (DI/SYS)
Rue Chapelle BEAUSSART, 101
B-6032  Mont-sur-Marchienne


More information about the redhat-list mailing list