-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 04 March 2003 05:22 pm, Mirabella, Mathew J wrote:
> a further question.  does anyone know what this type of fault or
> warning is: warning:
> /var/cache/apt/archives/openoffice_1.0.2-2_i386.rpm: V3 DSA signature:
> NOKEY, key ID 897da07a

You haven't imported the public key ( key ID 897da07a ), and rpm can't 
verify that the signature is valid. 'man rpm' for details.

- From the man page:
Digital  signatures  cannot be verified without a public key.  An ascii
armored public key can be added to the rpm database using --import.  An
imported  public key is carried in a header, and key ring management is
performed exactly like package management. For example,  all  currently
imported public keys can be displayed by...

For example, if you were installing a package I built and signed, you 
would do something like:
wget http://www.tuxfan.homeip.net:8080/gpgkey.txt
rpm --import gpgkey.txt

Or, all in one command:
rpm --import http://www.tuxfan.homeip.net:8080/gpgkey.txt

You could then check for installed keys with:
$ rpm -qa gpg-pubkey*
gpg-pubkey-db42a60e-37ea5438
gpg-pubkey-801bfd2b-3cb91cad

You could check my key details with:
$ rpm -qi gpg-pubkey-801bfd2b

Packages signed be me could then be installed without rpm warnings.

- -- 
- -Michael

pgp key:  http://www.tuxfan.homeip.net:8080/gpgkey.txt
Red Hat Linux 7.{2,3}|8.0 in 8M of RAM: http://www.rule-project.org/
- --
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+ZWr2n/07WoAb/SsRAvlYAJ9SUDsyVkkNQiiWBzx8PHS9fDhVPgCgr6P5
yJeeU04Tol+C+V/9pcxfJmk=
=h3Jd
-----END PGP SIGNATURE-----



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to