[Spacewalk-list] [External Sender] Re: missing public key

[Larry Clegg]

The client was originally provisioned against a Centos6/Spacewalk 2.8
server.  I did the standard client install of the rpms, etc as documented
in the client installation guide.

Since then the 2.8 Spacewalk Server was rebuilt from scratch using Centos 7
and Spacewalk 2.9 and all the clients re-registered.

The SW channels are created on the server using the
spacewalk-common-channels command like this:
/usr/bin/spacewalk-common-channels - u <user> -p <pass> -a x86_64
spacewalk29-client-centos6

I have noticed that the gpg key generated in the SW channel for the 2.9
client looks like this:

GPG key URL:
https://copr-be.cloud.fedoraproject.org/results/@spacewalkproject/spacewalk-2.9-client/pubkey.gpg
GPG key ID: 9BD837BA
GPG key Fingerprint: A353 22CF 3B3F 9C71 101E  B74B 49FC 0FD8 9BD8 37BA

Yet when I download that same pubkey.gpg and examine it I get different
results for the id and fingerprint:

[root at us3-inf-lu-s01 rpm-gpg]# gpg --with-fingerprint
RPM-GPG-KEY-spacewalk-2.9
pub  2048R/6E5454FA 2018-11-26 @spacewalkproject_spacewalk-2.9 (None)
<@spacewalkproject#spacewalk-2.9 at copr.fedorahosted.org>
      Key fingerprint = E089 1A20 65C5 4DDD 4E12  B8CA AD32 9E0D 6E54 54FA

I have updated the channel with this ID and Fingerprint but that made no
difference.  I'm very confused at this point.  The client does have a
public key installed which matched the version I get from the gpg
--with-fingerprint command.

On Mon, Feb 24, 2020 at 11:32 AM Stefan Bluhm <redhat.com at bluhm-de.com>
wrote:

> Hello Larry,
>
> how did you provision the client? When provisioning, you do need to push
> the key to the client first. This is not necessarily done automatically.
>
> Best wishes,
>
> Stefan
>
> ------------------------------
> *Von: *"Larry Clegg" <lclegg at kyriba.com>
> *An: *"spacewalk-list" <spacewalk-list at redhat.com>
> *Gesendet: *Montag, 24. Februar 2020 20:20:37
> *Betreff: *[Spacewalk-list] missing public key
>
> Greetings Spacewalkers:
>
> I have gone over and over my configuration and I'm just not finding the
> problem.
>
> Server: Spacewalk 2.9 on Centos 6 - all fully patched
> Client: Centos6
> download
> This issue is NOT happening on all clients...only a few.  When I try to do
> a "yum upgrade" I get this message about rhncfg:
>
> warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 Signature, key ID 9bd837ba:
> NOKEY
> Public key for rhncfg-5.10.129-1.el6.noarch.rpm is not installed
> --
> It is trying to upgrade rhncfg from 5.10.122-1 to 5.10.129-1
> No other package reports this issue.  Using the --nogpg on the yum command
> line gets around this issue but I'd like to understand and fix root cause.
>
> Any hints are greatly appreciated.
>
>
>
> *Larry E. Clegg*
>
> Systems Administrator | Kyriba
>
> [Address] 4435 Eastgate Mall, Suite 200, San Diego, CA 92121
> www.kyriba.com
> <http://www.kyriba.com>
> | Facebook
> <https://www.facebook.com/KyribaCorp>
> | Twitter
> <https://twitter.com/kyribacorp>
> | LinkedIn
> <http://www.linkedin.com/company/kyriba-corporation>
> | Blog
> <http://www.kyriba.com/blog>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> <https://www.redhat.com/mailman/listinfo/spacewalk-list>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>


-- 

*Larry E. Clegg*

Systems Administrator | Kyriba

[Address] 4435 Eastgate Mall, Suite 200, San Diego, CA 92121
www.kyriba.com | Facebook <https://www.facebook.com/KyribaCorp> | Twitter
<https://twitter.com/kyribacorp> | LinkedIn
<http://www.linkedin.com/company/kyriba-corporation> | Blog
<http://www.kyriba.com/blog>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20200224/7111c8b9/attachment.htm>