[packman] Re: Bad signature on dvd+rw-tools_6.1-0.pm.0_i586.rpm in SL10 packman repository prevents k3b installation

[Rainer Lay]

Hello Mr. Stern,

could you please tell us, from which site you got this package?

kind regards,
Rainer

Sam Stern schrieb:
> Dear Mr. Lay,
> 
> I use apt to keep my Suse 10.0 system updated. I noticed that I could not
> k3b for the past few weeks and finally decided to investigate why. it seems
> that the package dvd+rw-tools_6.1-0.pm.0_i586.rpm on the "packman"
> repository has a bad signature:
> 
> $host:/usr/lib/rpm/gnupg # apt-get install k3b
> Reading Package Lists... Done
> Building Dependency Tree... Done
> The following extra packages will be installed:
>   dvd+rw-tools
> The following packages will be upgraded
>   k3b
> The following NEW packages will be installed:
>   dvd+rw-tools
> 1 upgraded, 1 newly installed, 0 removed and 4 not upgraded.
> Need to get 0B/7976kB of archives.
> After unpacking 1081kB of additional disk space will be used.
> Do you want to continue? [Y/n]
> Checking GPG signatures...
> Unknown signature /var/cache/apt/archives/dvd+rw-tools_6.1-0.pm.0_i586.rpm:
> (SHA1) DSA sha1 md5 GPG NOT OK
> E: Error(s) while checking package signatures:
> 0 unsigned package(s)
> 1 package(s) with unknown signatures
> 0 package(s) with illegal/corrupted signatures
> E: Handler silently failed
> $host:/usr/lib/rpm/gnupg # rpm -Kv
> /var/cache/apt/archives/dvd+rw-tools_6.1-0.pm.0_i586.rpm
> /var/cache/apt/archives/dvd+rw-tools_6.1-0.pm.0_i586.rpm:
>     Header V3 DSA signature: BAD, key ID cd3140cd
>     Header SHA1 digest: OK (a4718a073357c7845101c997e61398f90715d93a)
>     MD5 digest: OK (e909823ffec113703cbecd080e99be04)
>     V3 DSA signature: BAD, key ID cd3140cd
> $host:/usr/lib/rpm/gnupg #
> 
> 
> FYI,
> 
> 
> Sam Stern
> Grand Island, New York, USA
> 
>