Bug 451545 - yum-3.2.8-2.fc8.noarch.rpm unsigned
yum-3.2.8-2.fc8.noarch.rpm unsigned
Product: Fedora
Classification: Fedora
Component: yum-presto (Show other bugs)
i386 Linux
low Severity low
: ---
: ---
Assigned To: Jonathan Dieter
Fedora Extras Quality Assurance
Depends On:
  Show dependency treegraph
Reported: 2008-06-15 09:40 EDT by Frank Murphy
Modified: 2014-01-21 18:03 EST (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2008-06-17 01:17:19 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Frank Murphy 2008-06-15 09:40:09 EDT
Description of problem:

Downloading Packages:
Downloading DeltaRPMs:
Rebuilding rpms from deltarpms
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID 30c9ecf8

Public key for yum-3.2.8-2.fc8.noarch.rpm is not installed

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
Actual results:

Expected results:

Additional info:
Comment 1 Seth Vidal 2008-06-16 14:44:34 EDT
Reassigning to presto b/c from what I can tell this is a result of presto.

feel free to bounce it back to yum if I'm wrong.
Comment 2 Jonathan Dieter 2008-06-16 23:37:03 EDT
It's most definitely not presto; the problem is that yum-3.2.8-2.fc8.noarch.rpm
was signed using the updates-testing key rather than the normal updates key.  If
the original reporter has never used the updates-testing repository, then yum
won't know to install the updates-testing key.

IMO, this isn't a yum bug either, but rather a build system bug.  The package
should never have gone into updates with the updates-testing key attached.  I'm
reassigning to buildsystem, but if that's incorrect, feel free to bounce it
where it does belong.
Comment 3 Jonathan Dieter 2008-06-17 01:17:19 EDT
Uh, okay, right.  So I was completely right...and absolutely wrong.  I was right
that it was a problem with the buildsystem...but not the Fedora buildsystem. 
The presto test repository uses reposync to get updates for F8 rather than
rsync.  I've changed this for F9+, but hadn't really gotten around to changing
it for F8.

Anyhow, yum-3.2.8-2.fc8 *did* originally come out signed with the
updates-testing key, but it was fixed within a few hours.  Unfortunately,
reposync didn't see that there was any difference, so the test repository has
just carried the old version (with the wrong key) until now.  I've fixed it and
apologize for the extra noise.

Closing as ERRATA because it's not really a bug in yum-presto, so I can't really
say which version it's fixed in.

Note You need to log in before you can comment on or make changes to this bug.