Bug 102439

Summary: segmentation fault when importing GPG key
Product: [Retired] Red Hat Linux Reporter: Ben Liblit <liblit>
Component: rpmAssignee: Jeff Johnson <jbj>
Status: CLOSED WORKSFORME QA Contact: Mike McLean <mikem>
Severity: medium Docs Contact:
Priority: medium    
Version: 9   
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
URL: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42692271
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-04-08 00:20:50 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
public key which causes "rpm --import" failure none

Description Ben Liblit 2003-08-15 05:43:19 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686) Gecko/20030610 Galeon/1.3.7

Description of problem:
"rpm --import" consistently fails with a segmentation fault when trying to
import my public key.  The failure happens before import; no new
"gpg-pubkey-*-*" package appears in RPM's list.

Version-Release number of selected component (if applicable):
rpm-4.2-0.69

How reproducible:
Always

Steps to Reproduce:
1. Export my public key in ASCII form using:

     gpg --export -a 42692271 >key.asc

2. Become root.

3. Import this key using "rpm --import key.asc".    

Actual Results:  rpm command failed with a segmentation fault.  Key has not been
imported.

Expected Results:  rpm should have completed without segmentation faulting.  Key
should have been imported.

Additional info:

The URL cited above will give you my ASCII-armored public key as exported by
PGP.  I'll attach the same thing, exported by GnuPG, to this bug report.

Note that my key is an RSA key, not a DSA key.  The RPM documentation claims
that both are supported.  If RSA is not supported, then the documentation should
be updated and RPM should present a diagnostic error message instead of simply
failing.

Comment 1 Ben Liblit 2003-08-15 05:44:15 UTC
Created attachment 93651 [details]
public key which causes "rpm --import" failure

Comment 2 Jeff Johnson 2004-04-08 00:20:50 UTC
rpm-4.3.1 fails as follows:

# rpm --import /tmp/pubkey.asc
error: /tmp/pubkey.asc: import failed.

Assuming fixed. AFAIK RSA/MD5 is understood by rpm.
Note that rpm supports only a subset of OpenPGP.