[packman] Tumbleweed GPG key expiring 03 Sep 2026

[Manfred Hollstein]

Hi Olaf,

On Wed, 02 Sep 2026, 10:51:52 +0200, Olaf Hering wrote:
> Wed, 2 Sep 2026 10:42:49 +0200 Manfred Hollstein <manfred.h at gmx.net>:
> 
> > zypper ref -f
> 
> This does nothing with the existing known key.
> Use clean+refresh, or add gpgkey= to the repo file.

I just wiped all repos and refreshed them, but the message remains the
same, both keys will expire in one day, and, yes, I have a gpgkey= line
in both repos:

  $ sudo grep gpgkey= /etc/zypper/repos.d/packman*obs.repo
  /etc/zypp/repos.d/packman-multimedia.local.repo:gpgkey=http://www/repos/suse/packman/$releasever/Multimedia/repodata/repomd.xml.key
  /etc/zypp/repos.d/packman.local.repo:gpgkey=http://www/repos/suse/packman/$releasever/Essentials/repodata/repomd.xml.key

Both are the files mirrored from ftp.uni-erlangen.de::packman/suse...
Their date is from Aug 24, shouldn't this be newer?

  $ ll /home/vault/mirror/packman/suse/openSUSE_Tumbleweed/Multimedia/repodata/repomd.xml.key 
  4 -rw-rw-r-- 3 manfred users 1715 Aug 24 22:44 /home/vault/mirror/packman/suse/openSUSE_Tumbleweed/Multimedia/repodata/repomd.xml.key

> Olaf

Any other idea? Hmm, got myself one...:

  $ sudo rpm -e gpg-pubkey-1abd1afb-66d76fb0

Now I got asked if I want to accept/trust the signing key, which now is
valid until Fri Jan  1 21:05:01 2027 ...

Case closed, for me at least ;-)

Cheers.

l8er
manfred
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 870 bytes
Desc: not available
URL: <http://lists.links2linux.de/pipermail/packman/attachments/20260902/c1a5025b/attachment.sig>