Bug 1778763
| Summary: | Invalid GPG Key from file:///tmp/mk-pubkey.gpg: 'signature' object has no attribute 'sig_typ' | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Michal Dekan <mdekan> |
| Component: | yum | Assignee: | Marek Blaha <mblaha> |
| Status: | CLOSED ERRATA | QA Contact: | Luca Berton <lberton> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.6 | CC: | james.antill, lberton, mblaha, mdomonko, ovasik, pkratoch, vhutsky |
| Target Milestone: | rc | Keywords: | AutoVerified, Triaged |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | yum-3.4.3-168.el7 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-09-29 20:18:04 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1780581 | ||
Should there be a separated BZ for the error message after fixing the mentioned typos? ~~~ Invalid GPG Key from file:///tmp/checkmk/mk-pubkey.gpg: signature 9 doesn't bind subkey to key, type is subkey revocation ~~~ Or it can be fixed as a part of this BZ? Seems like one of the subkeys was not signed by the main key? ~~~ pgpmsg.py:1077: # there must be one signature following the subkey that binds it to the main key ~~~ yum install cannot import the gpg key: signature 9 doesn't bind subkey to key, type is subkey revocation https://bugzilla.redhat.com/show_bug.cgi?id=1778784 Acking as per earlier discussion with Michal over IRC. We will fix the textual typo here. The other subkey-related bug will be handled via the other BZ. PR that fixes typo in attribute: https://github.com/rpm-software-management/yum/pull/111 I tried to verify that the patch fixes the issue, but I failed to reproduce the bug using the first comment: 1. wget http://mdekan-sat64.usersys.redhat.com/pub/check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm 2. yum install check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm but I do not see the error message. Am I missing something? 1. wget http://mdekan-sat64.usersys.redhat.com/pub/check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm 2. Create local yum repo, using gpg key mentioned in the first comment: ~~~ [root@foo ~]# cat /etc/yum.repos.d/checkmk.repo [CheckMK] baseurl = file:///tmp/checkmk/ name = checkmk gpgkey = file:///tmp/checkmk/mk-pubkey.gpg enabled = 1 gpgcheck = 1 ~~~ ll /tmp/checkmk/ total 197572 -rw-r--r--. 1 root root 202298548 Dec 2 09:58 check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm -rw-r--r--. 1 root root 10673 Dec 2 10:06 mk-pubkey.gpg drwxr-xr-x. 2 root root 24 Dec 2 10:09 repodata # createrepo /tmp/checkmk/ 3. yum install check-mk-enterprise-1.6.0p6.demo (need to enable epel and rhel-7-server-optional-rpms if you want to satisfy all dependencies) Install 1 Package Total download size: 193 M Installed size: 763 M Is this ok [y/d/N]: y Downloading packages: warning: /tmp/checkmk/check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID c4503261: NOKEY Public key for check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm is not installed Retrieving key from file:///tmp/checkmk/mk-pubkey.gpg Invalid GPG Key from file:///tmp/checkmk/mk-pubkey.gpg: 'signature' object has no attribute 'sig_typ' Thanks Michal. Now I can reproduce the bug and I confirm that the patch fixes the issue with invalid attribute name. Great, thanks for verifying Marek. Moving to POST based on comment #4 and comment #5. The patch is already merged into upstream. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (yum bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:3979 |
Description of problem: Have a public GPG key with two revoked subkeys: # gpg --with-fingerprint /tmp/checkmk/mk-pubkey.gpg pub 4096R/C4503261 2018-02-04 Check_MK Software Release Signing Key (2018) <feedback> Key fingerprint = B1E7 1065 75B7 23F0 0611 C612 434D AC48 C450 3261 uid Check_MK Software Daily Build Signing Key (2018) <feedback> sub 4096R/DFAC48ED 2018-02-04 sub 4096R/8EBC67DA 2018-02-04 [revoked: 2018-02-04] sub 4096R/F797A5BE 2018-02-04 [revoked: 2018-02-04] And try to install the package signed with that gpg key with yum. Version-Release number of selected component (if applicable): yum-3.4.3-161.el7.noarch How reproducible: Retrieving key from file:///tmp/checkmk/mk-pubkey.gpg Invalid GPG Key from file:///tmp/checkmk/mk-pubkey.gpg: 'signature' object has no attribute 'sig_typ' # cat /tmp/checkmk/mk-pubkey.gpg -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.12 (GNU/Linux) mQINBFp2ww0BEADRZKuNHgj8TF9LwHSlAd1+81IdqqOLViE4LvRPOshDqVpksOxC p6JLXJw4nxkWV0MtgqUes1sZHjWZxh9eTVqezPAfR95EFuJRIxWR55LLMggKm4LU NzxY1EpjYCwW3HNwypVT0YrXjEFB1BEDTlkIaFyd8+Mnf3Is1yyXuA6vAB2aCbWy +epGes+5HO6I/wSjizgloOXgzXs1hAx+iHeNG1OUQby/7tp48eY0Yp2RaqWhDZe9 dv2Y1dwbAHR3BRM6o1LIh4DMv5c8q9vcsHhW4sXLXX+9dEEEymJm8/mUo62jd/QX LpdLB6oX09Vd+h9iFd2xbI9YIzGJMuE37RWOXdCy8KV3oU91yA18U3llTIEa5JQ/ eFcDRkg0ws78dXnKfKnLqbANB4Adh+TlpC3Fg8k1E76tm2hndm0Cg0JUN6Ba2DHi mbsQnOK9IW8qzNSJ8FZm28f3Rr6Wf7XOeq8XzbTAbMRK1M5/T1eq6GzC4xZ/DTlM y81j7/j5EMmaxTm3nqx4O72oJkwJvFIkjRqJ9YxGy829XcxXlgFr6Pz7mSv9CRRP tQ2mfCT3Kp+iitgmDW7LAJfGjSGb2NjG2qhm3rpp1+b3Qo/udYE2s1nE+ssK45yh Tu9/0GpKuKSdYBJV33KDW8KiAyh36gkbVtgnJPIGFLGzc4nHDx11Yc6K1wARAQAB tERDaGVja19NSyBTb2Z0d2FyZSBSZWxlYXNlIFNpZ25pbmcgS2V5ICgyMDE4KSA8 ZmVlZGJhY2tAY2hlY2stbWsub3JnPokCNwQTAQgAIQUCWnbLYAIbAwULCQgHAwUV CgkICwUWAgMBAAIeAQIXgAAKCRBDTaxIxFAyYRLZEACKVAmPk7YyI1vyDDyL7D+f 7CQPUtolekvtloeoWtESU/wn02kW1CiCWWD3YnpcLW0bjRnKSruY6Pbe4prVcX38 ApjEioRrLDZhidhI8ccn4LMYY8w52HMVXeYaVtO6AWqZcWj8a1rHt6lqQMk/gKCP aGWAtDfGXTb34zSSoi8/uuw6ozAOtiHc8MHoNmjzHoLbJxxpnMBk6NQ9scDVFags LA1fCR7Dn3lL65+insDwAgawWayy6vFupHEN8rzPjq875ZPC+0hDfBdbxnCsaher gM7kjK1JexeZ7QgKooWqvyeQB06w1zxgf6DnqMYajfjC5sBuwgBeJeU3jpVqyqXR jTtncwp/bw8Ln8Sw1JDwKTzg9iD+m7zy8cJjiHsS3b4XdrohGR2kRWzrrIYo8ZIJ UGJAqA5+GJ8K/fPtslM8+ZmT7en4+7jBIZGHOfRap0n33C0PqoFxTimkFcHXeixI hSppz1AG1jHKljGN/gSIzjKJjYMq98cbPPd2/nFeoSIeSgU8RlGqFMgSl4eReSVe PpvVrs659t4DbbqlkgyPJRLEGUsNWmrZ8egmlOzDHEKI+f9wVB3z1HZaq/pX3FWb dJAvjRYV8BDGk4i9IEfD1YresqUwt17gycx9dbN+g+5KO4J1GrpSPYjcW+E/ccP+ fIT4x4/Egt8UTV6YCyZKcokCOgQTAQgAJAIbAwULCQgHAwUVCgkICwUWAgMBAAIe AQIXgAUCWneFqAIZAQAKCRBDTaxIxFAyYe+/D/42PJ8BOC/7Y8h/6pFg+qQNult6 qtVlLVN6AWaoRRSCsSAtA7ahcJpl9euUL/CTVPXxpUwZGgknaqbmvohkc+7EbIsB fMijC3Dw2JNSZpyY5YLuypEIBGocV/fvm4lPtS51uWbZbXOjx0C6r+8MbIHuUX5T Kos77RiXers/cGuFkKWXhcqCGU9G7VOc2thoOcH0Lt4kMaKk2WAhzE6Arv7vBqZ0 BRUPXqBp2guyn0hI93nO4CEF68OjZyX2eJUhmZVzqmArY65YnIR9dEI1qZieG6hB sQ7FhHQ0ZVTj6TZbIp30mSeEzcHMsgjsXmkivcZkLHoEFQY8nkfGZkTEtklsOyr3 qn+0b58ppgXUI7n+YaUD/m9eleD5q+qKddpIOcYzAAorOTzg7o+lDmpM9C3hW7Md spR3StgxUibKUGT+zxqhenX/yAcmpo4PILTXjVhDP9/+lJ/LJcX/O6IguhkL4Emu 3+75Lfs6xHU0L7YUV2hAzKXV3GtYK97xrvecViX4ZCtaCfTt4Io+kx8rBOyQdJnF jkcwDtQ4bvlDJsl3dcGFDcFN9kNU3y4n1bYT4mRqTunZqmvClGvU7w3S9SjiGECL tPk1Qf92GqvPAVnk8iU8ZU9AZa/ri79nBqWxFeSe4nJ12qkU5SYRTjMWJ+x8eLeC zun3rRUYBX5WhNiRDLRIQ2hlY2tfTUsgU29mdHdhcmUgRGFpbHkgQnVpbGQgU2ln bmluZyBLZXkgKDIwMTgpIDxmZWVkYmFja0BjaGVjay1tay5vcmc+iQI3BBMBCAAh BQJadsunAhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEENNrEjEUDJhLPgQ AINGWS5uzGfKctyK8/sALen8Fn7dSBzmDaUkMS3ntOhnqvshUOagfurBWdGDx/Qj vU5HYP8yrjzSRypK47kt0w5mUtdhEx2g32SVC6z75UqYAzwHHRe6QJxUKwTXyTvF PZPXq138pc69XRJrbDuYyXTKcHCbQcpv9tZPtkjatSLxOtx/Ov0JGXUM2hnrnu02 OMOeJrEL5e90PNZCEa4tnciSSqyCmywrHicqANLb9dqZCQX4j9T+nMhtd19Y0M6y w3zQeALsMJ+W1bmfwwu/mJjbgNSUSoAObeWXu8fGi45T2/aNkFvpUao00Yl8Ijj4 QJovuT/8kEGnaU/ZxinXxffVJfTiwhzI9KyhobSetlC7KXOHKtpkq9wyqQw1tZ/a F5+AUj4bpx6OTBM/lAJgTdZpPiy8R21J/MndAe73lW0BF1D9THtDt2pq1hGLQqfF ZSOPfSxmXd/F6fOHNlm06ZL89SCyrZgJ5Z095FtCFuynSTG8M6KUahb+EjGutTR8 fGFO6KiirnX1CVkMUf0Wps8Lre7ySNr9y5m/QTAwks4zmT3WsBomKWZes3z3ITV2 KyKnhgRG0hV5uRv8zv0m1vvSYAsX98+oBOzpL2VeOmiiI1W8e+KsyJ61p8iqxraC pSt+k+XaDU++A91e0CxEkMFagV9RwIjNa2pUDPrLX1GsuQINBFp2ww0BEADM01z0 l4VB+aJuajo8cjm7Q+rygy/9Tv6/5ZYnykJQqM5egia61wiiK/a1kipMPqStzqyZ HBJM9HiKWuqeUx+87VgqtK6MpbGsfbyRrhvMLjmk9v593eFeAgEMVlKs1aOOwR25 gi43BlcGBqJytKh+1yv1KW93MeKpgbsc7hIjWplUG8HrBFg7Q1spWeHrXerbPEu7 je1/jT4QuPzCis7J6TowMSqpQlgDOI+XDW5uwP0C+UfyTRtnXpgonvjDVxQ1sFNz JhSB4TRefiN09TBJ3eNL2ofPawefIra2qFKmu11dnPjJgV2JkH45qDdW6y9DxQ3D mPy3AMP7tqk0k+NM7UGGszaGIbVcw0s/kEt1n5SR4NbLAXPV3IifDvyFx/rGSstD wIuTVoh89qjlxj/noxPdXUo3iVZ5GYD51DY6VPHnyH9Kykk+esfPBYaGfnbbanSS 7ef5BfTLbFRFcB4bof6H9hde8ZFCE/6TFrAo4mCaL1Vq+x2Lb6dT6MKAM795hUHm 2NBZ1enAZubXKR2nHJya5wlpKqCHida1ITrfCFafZ+Lqr64uMSTx/PXYaRTdaS/5 C3HKQ4anZkFWWAFVR7QJg7dYw/S3N7pWLIWOW4T2inhZTM9iHBnfnpJDUhuK9+wU qSQQ2kNMEK4bqfakn3Jzcp2N04OHtBb5p8fwwwARAQABiQIfBBgBCAAJBQJadsMN AhsMAAoJEENNrEjEUDJhFUUP/3T4WbVMRfAabnLPq8Qq8YN4cc09TzINKwB0Xpl4 Qx+38eZDn32Nbf6gfR01awaJnkrO2JztBhWWlsNXqxEg0mo2mDwumfLdtTsh4QdB F+6NxFqJhtH9nvC9jtwCeYVP0/SdK9Advgie7H7v/ksskANXqx6wgggVAP+1dkim y761bPY/IsdoaM2sWuxweOswKX/tZmwq8+PRYdN9YQE8ypj4d3s45YxqlOK0nq40 A6g7br1GYGGGz1dWmlpCf9igvto/TghvFivXb3kVFefA4FXAjAMI/bHuv7r7BqB8 RUSAvN/aRSMKeiE+uTBX+OTJ9diNk1hoE5O4/N50ASzoAL6N5DzQjIXas4sjeyTr MLptiyWF/Gilo6dou0GrSmiLVts/BtAZFP0fMxv/ryIvsvAnoCHMlg6iQdcZRE8F SzZJAfd77cWx0SlDBdKJi758eD82V8D0AEBqOa4xfD+j4mSyMDz7ebBx/g9QTdXP q+R5z66SFKTohpDjZ3m3AToJfdtJnjMh6ZdZZzD5ugJxvsDbcuqcwQhD+MHOGFL6 NlnPM5pGAhZfyxZ9YMLRWWNDMeN5wzdGpNEPWWdNu+TEsNrIYwo5grpiZEy6ZHDI F7rr46WEgQSRvhXRJM5E042c8mUtleTJEYgrJU65ypxiQTYONK6yltCeU3ZRKyo/ O0EIuQINBFp2xdUBEADExXpyMCm6X6pYxWEu2PD8H8SYQITRO5QILHGjPl2YU8yn uiapafGrU8nlLhYEHQFt0MJsHLN9aeVemICKElAxNNWRacqJ5RStBcKB7Kl3ZLbl 8Xo8HhMKXm2xh7dOY2uaV31Uwni4qSrXXhlWmtjrWL4MZFPLB1oqOWwODrGlQ66l /2Yay8zmDGKbXht0h7AHvu2Lqd7EFtsiI5O0ZPouNngrYrRdKStmAXsf98FhqRhC oVee5FdoXfhouEPEOhXIAo+zl0Q+p87nOs3Sn1E0w9YPGm9RGDtjKRbRDxMMW+os tXYq5PDdjWTg79YllHZNkINfPn5WvMdorbhmGxCaNvJ9ecuBrlWrsAkY3Mt9KHUB zy+T5fFE8xbpJReWKHZzYufZSGKRi7At89VVQAwZF/jxsqtWfILf0xf+NMVJ9qmw Cb4PNRl4NUkXF/z0dvqUPrUrIsYwkelRvUgFOj6VY1qhnERG2Y5x8yZm7Q9Ct/o/ 5ih+GQDULOUOMWdRNuVMsJMz59VYgbUD6tMtdeKNMBQsmq6WbwJx3e8v3ihwSZsW 6ymZmKQ27UchTcqjWpgKJFcikC6GfFA3La/fDDyZDaVon6ypAGPHL6nUZDfteodV qlabyzsC4YAhX1nFWueRd4DT13tvsqPl17bMYJRq9+THejeEvB5+nnPac7LYiwAR AQABiQIfBCgBCAAJBQJad4OdAh0DAAoJEENNrEjEUDJhoTQQAMJTsS4n+slxG2rt EZRwLagcv44GnaMNXexJ50fB67sv5Lv1vT1OTTKAv5yuzUlPOSV/cMwSijka2PpA JJrWRykLhcjh2ItfxAWecqkS+d0SSKP2XObuuXS+nYnHxoqLOia/IRN+cKpIaDCc hWWKIzsvnQnU4I1/OghUc7b/OMTibd4+bvscDFafgIGQtFfecD1XfT7Ik0Coe3z7 7LvqAWUA7ELeVFnfJ9OLqqfUBgrQabY65otx4bMlurMNJK6RN/hagTZOBKuTOm70 RN3rSgEskCozuYs7jbNCE+mbu7V39AVVqS3CxYbT7nwcAMVnSpJE5Yc9/dkqtvLu 28c8AuOzjS/xQltOG9xkFLnI5yMi7xinNGvloUT6xYpQAgSh+XW5T/QkabFfM5AO fIuf+7/Q3rY+znLcYbL5JnGL8DGi4DFSWPfB6/M93XU4oGhaoD71UYOo2iaM2G/6 VPJIg8n1ExbtC9rjIVxJ6GJJ7OlSxX0Bllmwir1rzll/OMDu5o5kST2CoblQHkcn BP8Xp08CnYcK9SrF3C+MIP5nd1oZydha4EEdZzO11IWlCItyOpXcMpDtcF/VB2tU dnGSDAlqxsZ8uKYMPl0pXLULDwyeb4/6hzKoM9XOv8h1JPpbvh8oxKXak8ZRB2n1 Fy/yv1P18+CpcwJEmiIcA2GYJMz7iQREBBgBCAAPBQJadsXVAhsCBQkSzAMAAikJ EENNrEjEUDJhwV0gBBkBCAAGBQJadsXVAAoJEEL6Wg2OvGfaU0oP/2FvJqtPidQO ZoHUM2V1pVPJPEy2i99bLN7IvG6FyxBUty6soksAJISiP/inLxWyt2QOUeLRvK+E zn6Z9Hsh0PpuKYVKI/EG6U2Oo2AJjQnJ1XkuLzX8lTkvP4xQvjIcOBMJlBvv1bl/ WpuzI2QzSg3JpwwMX/lOFhiebqTnuNQGM9RS6Rsp64JWOPM8q9VTP1lEVdtUAgoS kStSRltSfq0ahQsL+rkHpuIa7VX9fY7OW4aN306Cg7CjmIe51a0q0v5DeH8Rn2fP ndMS8dJfqX8wTRYdB2q6FsNz3C1+lUcTBDnbT2M+ZWRDIUyLsjNkiQuNn67yX/6X wvbdJTwWnGj5TyN5Ptf61b1re7wmUq5KRdqWC7ckSyEJrUExn4ixQjXgo1kmQLLP JWyes1ik/BjO/0WSCrWkb2wM8jNeg3up6fwevD9GuJYkESUH8GFvm4GKsaJZjLzC 4QtDcdJcanSmBEY3sUEhvgNyiOcCCoPKnQrLVWMC3img3ff+DCoX/uECkAwMk3Rn 76FqHauep4oh+/PgofhvtmFqYcrbIOXhI0ZwclTiqCjeFueBxpLdX+qYm3TDstln NL2erOW+C/rtkY1e9hgQWaMJKK/Hl51BW5VG1t+hsrTEWt7DnRU5W+w8l8CbB2BF uolNqC9SFw3bh2EvT9+CEV8tNDRq6odkj50QAL9uXZJ5nXaP2iMLO6zcCj0mjcNg /SA/C9lAqCDNz+dTv9wM5AO7kKdgGX6SJMFunWmkqYqMEu2P3H1ZfeElFpHuO62E nzrJmN4Ut8eSRUpkhZUK9Xt+EmLzdJdiK2Krb9Fck3AhJnAiLl50uzEs0iM3OhxS uceiB0VBzVQ9vrBYAF99TCP9sLn5GpynZv/0i3tILdoEkkHTVaqyU21Qq4YuTSfq +ueMXD2Vl4AAWmwjfaLW4Y3yQHK3w3JiR2id6ZA7u1XQH9qEvmM23mruUYtOq1YT pEqxOOi/Hm4FK4q8mtA050/aDAY5aIAtFa/qLeHPIxNx9h5ociSuWZAa1owQhVuG /tuNEDziWFsyWNz4eb9O6rRbZOmAEuvWs9siaA7Pu3upxzfPG4eSaKQY7pH/CKhM eug+xWIOkL1VZ0B9As5+MrqMceTafSQxxdHF0G/JaJfVAAMHIAO9GMzYPiTceDDR sxdkrMNoTODPW+og+tBnu1qQIES5IEDnlqAo7gbxjVcK5PCSnhFe2FiUYnhzeVuL L/fiRSPmI4Wj1U+ywltYjoGGOCpjllztccQssiySxPqjA1NRsrh1te0xNNJgwF6r DSVmDDIlMdAv0Gn96k55LFTTu79OEUhSrloQ0BFzLdpunaM1Lws336JwaCY6zGEk 0az81SOTNK/kd2OnuQINBFp2yI8BEACkouekybzvm4cdvkZw/JbhYInMO8pWPjBw IYmAA5mY1iMjNZ0wpAXmtk3xS6+VQrDcGuvClz+2UPjHhwSDJY0SWt4YCdkXy+6y bItH+KIG+kEOdUdwuSyrAcdyiHRRvbRTPVOjiMQNMpx8tbBSVPYleBzLQm7TP3zU JzT23gNv4SrK0/MQh1gWN7R3JkeE3PpDIs9+RoJustsIHdoB9+vJnLOjZm0ze03l AgacyCik6YN289KupxrEXK4fWIgEeBGsr4NwSRU4ilIkMCAgVXTR1zvaM0gGqESn CVoRUUCJgRYuPi45FMovIGHXfHNME64T9Z4C9nO7I2DgcccrZCtUDIW4hKdcFORk ZT6cHvtGY5HGLAkfrcF7lTehnAe30JjXde4XokDn2e8nRnQE3zOIprOZLUnFr1Fn lCkDlyQ9n52DpkR0R700rKmxvBJWzkWkmNeMYEpUQ51JhhfopGQ7JT1P0K5nHccs cA4gcsheeGOTYNMbF7dJn8CpM+uNPSMcbzdW7ZFj/OjAyWUNj2wnwFQ8YO2jY1DK FZNrxyWcloB1E0ZVcLW+vbjt+j0rN2OkKAOe5TL2JIdY6FejUA1FvSQW1Cvq0xtz HDIGwDeYm3seQSnL49PV2wkkPmkk/ns6Ox7Zko4GC+dNNx54UEzcN23zon4Sn9/a EF0f06snkwARAQABiQIfBCgBCAAJBQJad4P2Ah0DAAoJEENNrEjEUDJhBE8P/2uO xEad2+MwNKUFs3aQhc5WzF5eBKzmqABqj5MzkEg3r1oCgWcnq96VfqcBpV6yQTMw Qz4B010Wug+TViVpKw+GRdvLwwHUgHif2EtAyldMb92Ge6OyHa4ZP9jElpj+mq5h Ouxw9ofRILb50X842rr4lVA40zX+/+DWukH4hwxbG1zOt6X9zwCCeUgV4ZAs+YNS 5dSXtLEK01FriOINaAXe3rlaSEBpgjqQepj3MascJAbQvn/bPwZ5YO7fdBYRvj9P vwJJzFte9FXgfqxK1ty6DZT02NlIwB25iZ/m99N9GjimuMMN8TQsE9h4Z6WzZwOU p3dH+RxpoufrTxQQmoM5CRXAACOM4FeCWgp0KwfGNjFd1Zn3VOKUCA+93jgAcfkt mduXMINHVfXtRfX8AG2PZwnd3WP+4bSnHIh3b7cwLViubL9q5TVZf1tPLS+gmBOW jsvQZyyyT/hG0pzLAbREzMAqP0G3eCtHNM054pSWN0QRFbznPuTNFt0w9zg2U6+v eDpv+fKgoDbQptQqPNMBeMWbaeBLxDAArQw86gUgbX8bI4qW3w/aE9WjdY7xqbnr 7XCf4cMhCx+gGC/b27mjBqwT+lBF2AcTuSqfsb9CDvdbYqd2+B2KcpY+ImcX+ITv 0wAKXnc6wzwexHyLxBSw9WS55OPBKUCElHP8JE0jiQREBBgBCAAPBQJadsiPAhsC BQkSzAMAAikJEENNrEjEUDJhwV0gBBkBCAAGBQJadsiPAAoJEPLdT/z3l6W+BGUP /jTka87IjsCmgMqb6vNcRD3gwdNAt2SQTFrjxMvmczgiabvjBnMb+drFViKANWHH 1pRpxdCVYGfvPM4U0Y6WGnJnLvmEj2L2irCmcfZXYOJRdlX7Rjcjk/YvNVQh1eA4 O91rIK6WEDkU/kEm94bn99en9LNeXVhJOODr+IbJfKylow8sP13mHYktV9T+2vh3 N7+Axaqwn+jSz5dbh+7iA0LpojzXfp+zgGF/oAJe9SjzYi+zdMJicBGDR18oXwul my0Jh4YuKrJqES7eV0//OvzS44Ovdrm3OrFYQ3fsY4zbB6Bm2s7Iwo1gXLyazdSx jpL+PtFwZ0YbMS8wNfe+gxJF+ezwT5NAnIOJKP54aZ2xEhljKS0mlzF0dK/MEvSu IpMysYw9Y6elMoK7Aypm0jqDXUkyz4CYfYUtp+/8aC5/d5nZ4zuHFb22ofOqCnbI 1NsGHaER94/x8fZ7R1+cG/iKsExlj4vTvmHHNTW52Tj9ylpbX7qq5Wz2ScQt9Gu7 5/3EUgf3pDbZmUDrODbZyUWSRse/geeFwseLzzFQ9i4oiiQrJ9EMaENNt0p1qzmc woH3GtlK/y6UqqDrJQ3A6SOtjkALpZ9iw2qe2jgrohi5ZQM2p54aiq8L56BRcPHB HVH8XQZ8jt8y3JghMv+rW6+QNQmI0BGkuo3egYsgL03lSVsQAJkoMCrb3y7koDWy 9coV+k8WW5v2WVx2LK4lzWZfJNgfBsdWefQdtLUWY3S5F6E3XWPPi0wVCBk8wqTs IcE337lrPvvpResSTvzNLpG/xw8avvQquQ5Ee58tfc66+am/eDbPSiiAo3xHE0vo G+lM0qVKuXvQ9LD7YCrj7kuVsRDMtrWE09LhItuU8n0c3VjE5QRuVagQOkV7/4OJ F1uxzbREJKBSJgk9oL1LCmc353iBJGyUZr6YelQ+jC+eEH8Er2n9ZIITE7WxPK46 EtlwzSRSgAcMTpQ0+N4rAH/z41z5tjfSgJCu8Dt+9M2UZo6bTlCr2tEzGHUuPs5F sSATr7BZzrJDYTo35koyvXfhUz0VnINtJYafi3g1vGp/p5IS2C/rlSa2BZ7ZJ21U MfoHzOgCFAyqH5Cqy4qp+SkZ2l5+EZYIsgNC9k8eG2BV8Cx3NsTIEFrBXcLBmziN EuBKnRdjFZ4dQuRm5SIku3XCUAzQ52YZ6MWsGPe9Rl9MBkoh2FQOKuDfPRLEhnHT g5tezkywA2lal2QnAGLba0matbWSg++l7DuOh9aQp/OGnh5Dqrhtd98XEHJT6Cw1 ilf3gVIBQqRZXKz9lM0y7DGR9+jDMVLrumFzxukY4F5CfQUZ3y6C3yQ+LNZcX/MG FboBHm7bY+vqI5ciDagALrbKaONO =erz8 -----END PGP PUBLIC KEY BLOCK----- Steps to Reproduce: 1. Have a package signed by the GPG key from above. Its here: http://mdekan-sat64.usersys.redhat.com/pub/check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm 2. # yum install check-mk-enterprise-1.6.0p6.demo 3. Actual results: # yum install check-mk-enterprise-1.6.0p6.demo ... ... ... warning: /tmp/checkmk/check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID c4503261: NOKEY Public key for check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm is not installed Retrieving key from file:///tmp/checkmk/mk-pubkey.gpg Invalid GPG Key from file:///tmp/checkmk/mk-pubkey.gpg: 'signature' object has no attribute 'sig_typ' Expected results: Better warning message. Additional info: We have a typo in the yum code on two places. There should be 'sig_type' instead of 'sig_typ': https://github.com/rpm-software-management/yum/blob/master/yum/pgpmsg.py#L1081 https://github.com/rpm-software-management/yum/blob/master/yum/pgpmsg.py#L986 When the typos are corrected, we have a new warning message: ~~~ warning: /tmp/checkmk/check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID c4503261: NOKEY Public key for check-mk-enterprise-1.6.0p6.demo-el7-38.x86_64.rpm is not installed Retrieving key from file:///tmp/checkmk/mk-pubkey.gpg Invalid GPG Key from file:///tmp/checkmk/mk-pubkey.gpg: signature 9 doesn't bind subkey to key, type is subkey revocation ~~~