Description of problem: When a gpg private key is expired, and you try to sign using rpmsign, you get an error "Pass phrase check failed" which is really misleading. Took me a while to troubleshoot this and that it was in fact my key that was expired. Version-Release number of selected component (if applicable): rpm-4.8.1-5.fc14.x86_64 How reproducible: create a new gpg key that expires immediately. rpmsign a random rpm
The error message is now modified to: "Pass phrase check failed or gpg key expired" in upstream.