Re: [Spacewalk-list] Channel GPG Key Setup

2012-01-24 Thread Michael Mraka
rbo...@williams-int.com wrote:
% That makes sense; however what is the point to having the GPG key information 
in the channel configuration?

Well, if you already have gpg keys on disk e.g. from you installation
media then you can put something like
  file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
to your channel GPG info and it will work as you expected.

% Rich J. Bogle
% Infrastructure & Computing Systems
% Information Technology
% 
% -Original Message-
...
% % When configuring a channel in spacewalk there is an option at the
% % bottom % of the configuration screen for the local of the GPG Key
% % and GPG Key ID.  I cannot successfully use these to satisfy the GPG
% % Key requirements for % the channel.
% %
% % For the GPG URL:  http://spacewalk.server.fqdn/pub/keyname and I
% % have % the key in that location.
% %
% % GPG Key ID: I use the ID for the above key % % Clients do not pull
% % this information down with the channel to allow the % RPM's to
% % install.  How can I get this to happen without manually adding % the
% % GPG key to each client system?
% 
% yum-rhn-plugin automatically installs GPG keys from local filesystem
% only. This is for security reasons - you can't really trust signature
% if you download both rpm and key from the same source.
% 

Regards,

--
Michael Mráka
Satellite Engineering, Red Hat

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] Channel GPG Key Setup

2012-01-24 Thread RBogle
That makes sense; however what is the point to having the GPG key information 
in the channel configuration?

Rich J. Bogle
Infrastructure & Computing Systems
Information Technology

-Original Message-
From: spacewalk-list-boun...@redhat.com 
[mailto:spacewalk-list-boun...@redhat.com] On Behalf Of Michael Mraka
Sent: Tuesday, January 24, 2012 4:48 AM
To: spacewalk-list@redhat.com
Subject: Re: [Spacewalk-list] Channel GPG Key Setup

rbo...@williams-int.com wrote:
% When configuring a channel in spacewalk there is an option at the bottom % of 
the configuration screen for the local of the GPG Key and GPG Key ID.
% I cannot successfully use these to satisfy the GPG Key requirements for % the 
channel.
%
% For the GPG URL:  http://spacewalk.server.fqdn/pub/keyname and I have % the 
key in that location.
%
% GPG Key ID: I use the ID for the above key % % Clients do not pull this 
information down with the channel to allow the % RPM's to install.  How can I 
get this to happen without manually adding % the GPG key to each client system?

yum-rhn-plugin automatically installs GPG keys from local filesystem only. This 
is for security reasons - you can't really trust signature if you download both 
rpm and key from the same source.

% Rich J. Bogle
% Infrastructure & Computing Systems
% Information Technology


Regards,

--
Michael Mráka
Satellite Engineering, Red Hat

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list
WILLIAMS INTERNATIONAL   A COMPANY WITH A VISION
 

This email message and any attachment(s) are for the sole use of the intended
recipient(s) and may contain proprietary and/or confidential information which 
may
be privileged or otherwise protected from disclosure.

Any unauthorized review, use, disclosure or distribution is prohibited. If you 
are
not the intended recipient(s), please contact the sender by reply email and 
destroy
the original message and any copies of the message as well as any attachment(s)
to the original message.

This email message does not form a binding contract or contract amendment with
the sender, unless it clearly states in writing that it is a contract or 
contract amendment.

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] Channel GPG Key Setup

2012-01-24 Thread Michael Mraka
rbo...@williams-int.com wrote:
% When configuring a channel in spacewalk there is an option at the bottom
% of the configuration screen for the local of the GPG Key and GPG Key ID.
% I cannot successfully use these to satisfy the GPG Key requirements for
% the channel.
% 
% For the GPG URL:  http://spacewalk.server.fqdn/pub/keyname and I have
% the key in that location.
% 
% GPG Key ID: I use the ID for the above key
% 
% Clients do not pull this information down with the channel to allow the
% RPM's to install.  How can I get this to happen without manually adding
% the GPG key to each client system?

yum-rhn-plugin automatically installs GPG keys from local filesystem
only. This is for security reasons - you can't really trust signature if
you download both rpm and key from the same source.

% Rich J. Bogle
% Infrastructure & Computing Systems
% Information Technology


Regards,

--
Michael Mráka
Satellite Engineering, Red Hat

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

[Spacewalk-list] Channel GPG Key Setup

2012-01-23 Thread RBogle
When configuring a channel in spacewalk there is an option at the bottom
of the configuration screen for the local of the GPG Key and GPG Key ID.
I cannot successfully use these to satisfy the GPG Key requirements for
the channel.

 

For the GPG URL:  http://spacewalk.server.fqdn/pub/keyname and I have
the key in that location.

GPG Key ID: I use the ID for the above key

 

Clients do not pull this information down with the channel to allow the
RPM's to install.  How can I get this to happen without manually adding
the GPG key to each client system?

 

Rich J. Bogle
Infrastructure & Computing Systems
Information Technology



 

WILLIAMS INTERNATIONAL   A COMPANY WITH A VISION
 

This email message and any attachment(s) are for the sole use of the intended
recipient(s) and may contain proprietary and/or confidential information which 
may
be privileged or otherwise protected from disclosure.

Any unauthorized review, use, disclosure or distribution is prohibited. If you 
are
not the intended recipient(s), please contact the sender by reply email and 
destroy
the original message and any copies of the message as well as any attachment(s)
to the original message.

This email message does not form a binding contract or contract amendment with
the sender, unless it clearly states in writing that it is a contract or 
contract amendment.
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list