[packman] does packman have a new key or what is going on?

[Marcel Kühlhorn]

On Thu, 2021-10-28 at 08:12 +0200, Simon Vogl wrote:
> I managed to solve this by listing all rpm keys with
> 
> rpm -q gpg-pubkey --qf '%{name}-%{version}-%{release} --> %{summary}\n'
> 
> and then removing the packman key with
> 
> sudo rpm -e gpg-pubkey-<id of packman key>
> 
> afterwards, I removed the Packman repo, re-added it and got a new key
> trust prompt.
> Once i accepted that, I could install packages from packman again
> without this key error showing up,
> 
> e.g. force-reinstalling ffmpeg-4. It does seem to be a key issue of
> some
> sort to me, but maybe I'm wrong.
> 
Interestingly, this only works with zypper, dnf and plain rpm fail to
import the key:

Importing GPG key 0x1ABD1AFB:
 Userid     : "PackMan Project (signing key) <packman at links2linux.de>"
 Fingerprint: F887 5B88 0D51 8B6B 8C53 0D13 45A1 D067 1ABD 1AFB
 From       : https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/repodata/repomd.xml.key
Is this ok [y/N]: y
Key import failed (code 2). Failing package is: autopano-sift-C-2.5.1-3.118.x86_64
 GPG Keys are configured as: https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/repodata/repomd.xml.key
Public key for avidemux3-qt5-2.7.8-3.33.x86_64.rpm is not installed. Failing package is: avidemux3-qt5-2.7.8-3.33.x86_64
 GPG Keys are configured as: https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/repodata/repomd.xml.key



wget https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/repodata/repomd.xml.key
[…]
rpm --import repomd.xml.key
error: repomd.xml.key: key 1 import failed.



gpg --import-options show-only --import repomd.xml.key 
gpg: key 45A1D0671ABD1AFB: 3 signatures not checked due to missing keys
pub   rsa4096 2006-09-18 [SC] [expires: 2024-09-12]
      F8875B880D518B6B8C530D1345A1D0671ABD1AFB
uid                      PackMan Project (signing key) <packman at links2linux.de>

-- 
Have a lot of fun!

Marcel Kühlhorn