[packman] Packman signing keys will expire...

[Manfred Hollstein]

My fault, of course! Sorry for the noise, the gpgkey line in my .repo
file is missing the $releasever part...

Cheers.

l8er
manfred

On Wed, 02 Jul 2025, 11:09:50 +0200, Manfred Hollstein wrote:
> Hi Stefan,
> 
> On Wed, 02 Jul 2025, 11:01:45 +0200, Stefan Botter wrote:
> > Hi Manfred,
> > 
> > Am Mittwoch, dem 02.07.2025 um 10:11 +0200 schrieb Manfred Hollstein:
> > > now that the keys have expired, rpm complains loudly:
> > > 
> > >   # rpm -qa > /dev/null
> > >   error: Key 9045a0016946124b (Essentials OBS Project
> > > <Essentials at packman.links2linux.de>) expired on 2025-06-29 18:03:43
> > >   ...
> > > 
> > > As I wrote below, I pull the packages directly from
> > > pmbs.links2linux.de,
> > > not from the mirrors. Either way, someone may need to generate new
> > > keys.
> > 
> > The Essentials-Key has been automatically renewed on Jun 16th, and is
> > used for signing the repo. Give it a try:
> > 
> > curl $(zypper lr -d -r Essentials | egrep GPG-Schlüssel | cut -f2- -d:)| gpg
> > 
> > should give you 
> > 
> > pub   rsa2048 2014-05-15 [SC] [verfällt: 2027-08-25]
> >       52B1F263223D311D1FD041409045A0016946124B
> > uid           Essentials OBS Project
> > <Essentials at packman.links2linux.de>pub   rsa2048 2014-05-15 [SC]
> > [verfällt: 2027-08-25]
> >       52B1F263223D311D1FD041409045A0016946124B
> > uid           Essentials OBS Project <Essentials at packman.links2linux.de>
> > 
> > zypper ref
> > should update the key in your keyring.
> 
> it does not, unfortunately:
> 
> # zypper ref
> ...
> Looking for gpg keys in repository packman.obs.
>   gpgkey=http://pmbs.links2linux.de:8080/Essentials/repodata/repomd.xml.key
> Warning: The gpg key signing file 'repomd.xml' has expired.
>   Repository:       packman.obs
>   Key Fingerprint:  52B1 F263 223D 311D 1FD0 4140 9045 A001 6946 124B
>   Key Name:         Essentials OBS Project <Essentials at packman.links2linux.de>
>   Key Algorithm:    RSA 2048
>   Key Created:      Fri Apr 21 18:03:43 2023
>   Key Expires:      Sun Jun 29 18:03:43 2025 (EXPIRED)
>   Rpm Name:         gpg-pubkey-6946124b-6442b3df
> 
> # zypper lr -d -r packman.obs
> Alias          : packman.obs
> Name           : packman.obs
> URI            : http://pmbs.links2linux.de:8080/Essentials/openSUSE_Tumbleweed/
> Enabled        : Yes
> GPG Check      : (r ) Yes
> Priority       : 92 (raised priority)
> Autorefresh    : On
> Keep Packages  : Off
> Type           : rpm-md
> GPG Key URI    : http://pmbs.links2linux.de:8080/Essentials/repodata/repomd.xml.key
> Path Prefix    : 
> Parent Service : 
> Keywords       : ---
> Repo Info Path : /etc/zypp/repos.d/packman.obs.repo
> MD Cache Path  : /var/cache/zypp/raw/packman.obs
> 
> > Greetings,
> > 
> > Stefan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.links2linux.de/pipermail/packman/attachments/20250702/c4bcaf52/attachment-0001.sig>