Glen Turner wrote:

O Plameras wrote:

I have Fedora Core 4. This is what I do the first time I got a similar error.

As root I do,

# rpm --import http://public.planetmirror.com/pub/fedora/linux/core/4/i386/os/RPM-GPG-KEY-fedora




You should get the key directly from the Red Hat or Debian
site.  The whole purpose of the key is to allow you to
verify that the mirror hasn't altered the package.


The idea of the GPG-KEY is the file downloaded has not been changed in transit.

Fetching
the key from the mirror where you downloaded the software
allows the mirror site to feed you altered packages.


The idea that mirror sites alters files that they served is absurd. Espousing such
idea undermines the system.


Cheers,
Glen


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to