I've seen a couple of people mention this when checking signed rpms.

If you're getting the missing key errors when running 'rpm --checksig'
on cooker rpms, such as this:
[todd@fiji ~]$ rpm --checksig
/work/Mandrake-devel/cooker/i586/Mandrake/RPMS/apa
che-1.3.23-1mdk.i586.rpm 
/work/Mandrake-devel/cooker/i586/Mandrake/RPMS/apache-1.3.23-1mdk.i586.rpm:
md5 (GPG) OK (MISSING KEYS: GPG#9B4A4024)

It's not a problem with the RPM.  It's a problem with your gpg
configuration.  The only thing wrong is that you don't have a copy of
Mandrake's public key.  To get it working, do the following:

1a)Download the list of keys from
      https://www.mandrakesecure.net/RPM-GPG-KEYS
   to your home directory.
   --OR--
1b)Copy the file off of CD1 into your home directory.
2) Import the key into your keyring:
      [todd@fiji ~]$ gpg --import RPM-GPG-KEYS 
      gpg: key 9B4A4024: public key imported
      gpg: key 22458A98: public key imported
      gpg: Total number processed: 2
      gpg:               imported: 2
3) Now when you do the checksum:
[todd@fiji ~]$ rpm --checksig
/work/Mandrake-devel/cooker/i586/Mandrake/RPMS/apa
che-1.3.23-1mdk.i586.rpm 
/work/Mandrake-devel/cooker/i586/Mandrake/RPMS/apache-1.3.23-1mdk.i586.rpm:
md5 gpg OK

I don't talk about signing because I'm not an authority on trust.

Regards...              Todd
-- 
               Todd Lyons -- MandrakeSoft, Inc.
                 http://www.mandrakesoft.com/
UNIX was not designed to stop you from doing stupid things, because 
  that would also stop you from doing clever things. -- Doug Gwyn

Attachment: msg56847/pgp00000.pgp
Description: PGP signature

Reply via email to