Bug 113249 - up2date problems with gpg
up2date problems with gpg
Status: CLOSED DUPLICATE of bug 111601
Product: Fedora
Classification: Fedora
Component: up2date (Show other bugs)
i386 Linux
medium Severity medium
: ---
: ---
Assigned To: Adrian Likins
Depends On:
  Show dependency treegraph
Reported: 2004-01-10 12:36 EST by Alan Deaton
Modified: 2007-11-30 17:10 EST (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2006-02-21 14:00:42 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Alan Deaton 2004-01-10 12:36:23 EST
Description of problem:

Fedora core now seems to require gpg keys for the material
installed/updated on the box.  I have found the following packages
will not install due to problems with gpg not being able to verify the
package content:

     nptl-devel (requires glibc)
Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. Fresh install Fedora Core 1 disks from website
2. Begin Up2Date from the RHN Alert Notification Tool
3. Select Packages to Install
Actual results:

Some packages install without issue.  The others come up with a
message the gpg key was not verified.  If you continue, it will d/l
the remaining packages, however when it goes to install, the first
file it comes to with a gpg problem seems to be corrupted and up2date
exits out at that point.  Had to install packages 1 by 1 till I was
able to locate all the files with this problem.

Expected results:

Should read and verify key and install normally as does RH9.

Additional info:

If I have missed something in the documentation or on the websites FAQ
and how to lists please steer me in the right direction. Thanks Alan
Comment 1 P Fudd 2004-02-06 03:39:34 EST
Aha!  I found the problem!

If the rpm file doesn't get fully downloaded (which happens a lot),
the GPG key will fail to verify, and give this error!

Two ways of checking this:

1) rpm -Kv the-rpm-file-in-question.i386.rpm

If the md5 checksum fails as well as the gpg signature, the rpm got
cut off.

2) ls -l the-rpm-file.i386.rpm

If the size doesn't match what's on the ftp site, the rpm got cut off.

Workaround: download the file with 'wget -c .....' or something.

Fix: make rpm check the size before the signature; make up2date do a
better job of downloading.
Comment 2 William M. Quarles 2004-06-29 16:53:16 EDT
This is a duplicate of bug #111601.  Someone at Red Hat please mark it
as such.
Comment 3 Adrian Likins 2004-08-24 18:19:06 EDT

*** This bug has been marked as a duplicate of 111601 ***
Comment 4 Red Hat Bugzilla 2006-02-21 14:00:42 EST
Changed to 'CLOSED' state since 'RESOLVED' has been deprecated.

Note You need to log in before you can comment on or make changes to this bug.