[packman] Packman signing keys will expire...

Manfred Hollstein manfred.h at gmx.net
Wed Jul 2 11:09:50 CEST 2025


Hi Stefan,

On Wed, 02 Jul 2025, 11:01:45 +0200, Stefan Botter wrote:
> Hi Manfred,
> 
> Am Mittwoch, dem 02.07.2025 um 10:11 +0200 schrieb Manfred Hollstein:
> > now that the keys have expired, rpm complains loudly:
> > 
> >   # rpm -qa > /dev/null
> >   error: Key 9045a0016946124b (Essentials OBS Project
> > <Essentials at packman.links2linux.de>) expired on 2025-06-29 18:03:43
> >   ...
> > 
> > As I wrote below, I pull the packages directly from
> > pmbs.links2linux.de,
> > not from the mirrors. Either way, someone may need to generate new
> > keys.
> 
> The Essentials-Key has been automatically renewed on Jun 16th, and is
> used for signing the repo. Give it a try:
> 
> curl $(zypper lr -d -r Essentials | egrep GPG-Schlüssel | cut -f2- -d:)| gpg
> 
> should give you 
> 
> pub   rsa2048 2014-05-15 [SC] [verfällt: 2027-08-25]
>       52B1F263223D311D1FD041409045A0016946124B
> uid           Essentials OBS Project
> <Essentials at packman.links2linux.de>pub   rsa2048 2014-05-15 [SC]
> [verfällt: 2027-08-25]
>       52B1F263223D311D1FD041409045A0016946124B
> uid           Essentials OBS Project <Essentials at packman.links2linux.de>
> 
> zypper ref
> should update the key in your keyring.

it does not, unfortunately:

# zypper ref
...
Looking for gpg keys in repository packman.obs.
  gpgkey=http://pmbs.links2linux.de:8080/Essentials/repodata/repomd.xml.key
Warning: The gpg key signing file 'repomd.xml' has expired.
  Repository:       packman.obs
  Key Fingerprint:  52B1 F263 223D 311D 1FD0 4140 9045 A001 6946 124B
  Key Name:         Essentials OBS Project <Essentials at packman.links2linux.de>
  Key Algorithm:    RSA 2048
  Key Created:      Fri Apr 21 18:03:43 2023
  Key Expires:      Sun Jun 29 18:03:43 2025 (EXPIRED)
  Rpm Name:         gpg-pubkey-6946124b-6442b3df

# zypper lr -d -r packman.obs
Alias          : packman.obs
Name           : packman.obs
URI            : http://pmbs.links2linux.de:8080/Essentials/openSUSE_Tumbleweed/
Enabled        : Yes
GPG Check      : (r ) Yes
Priority       : 92 (raised priority)
Autorefresh    : On
Keep Packages  : Off
Type           : rpm-md
GPG Key URI    : http://pmbs.links2linux.de:8080/Essentials/repodata/repomd.xml.key
Path Prefix    : 
Parent Service : 
Keywords       : ---
Repo Info Path : /etc/zypp/repos.d/packman.obs.repo
MD Cache Path  : /var/cache/zypp/raw/packman.obs

> Greetings,
> 
> Stefan

Cheers.

l8er
manfred
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.links2linux.de/pipermail/packman/attachments/20250702/72d60839/attachment.sig>


More information about the Packman mailing list