Hi Franchisseur,

> > Hi,
> > 
> > > ----- Original message from Jon Peatfield  on 2007-08-31 +0100 at
14:00:52-----
> > > 
> > > > On Thu, 30 Aug 2007, Alex Kruchkoff wrote:
> > > > 
> > > > >Yes, I've found a lots of signatures in sl-release-5.0-4.x86_64.
> > > > >And thinking about all these keys I wonder why all of them are not 
> > > > >installed as a part of the SL installation process?
> > > > 
> > > > [...]
> > > 
> > >        with a date corresponding to the installation date.
> > 
> > Yes they are installed _on your hard drive_ as part of the SL installation,
> > but they are not installed into the rpm database, so just because they're
> > there doesn't mean you're using them. The next step is to:
> > 
> > # rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY*
> > 
> > and from what is being discussed here, the person above is suggesting that the
> > installation do the above command to install the keys into the rpm database.
> >
> 
>        I am not sure I understand what is the result of the rpm -
> -import command       because if I do a :
> 
>        rpm -qi gpg-pubkey

To get a list of all the keys in your rpm database system:

# rpm -qa gpg-pubkey\*|sort -n

which for me produces:

gpg-pubkey-0c98ff9d-3d4a527c.(none)
gpg-pubkey-1aa78495-3eb24301.(none)
gpg-pubkey-217521f6-45e8a532.(none)
gpg-pubkey-30c9ecf8-3f9da3f7.(none)
gpg-pubkey-443e1821-421f218f.(none)
gpg-pubkey-4f2a6fd2-3f9d9d3b.(none)
gpg-pubkey-66534c2b-41d57eae.(none)
gpg-pubkey-6b8d79e6-3f49313d.(none)
gpg-pubkey-82fd17b2-3ffdb083.(none)
gpg-pubkey-897da07a-3c979a7f.(none)
gpg-pubkey-a7048f8d-3ff1defa.(none)
gpg-pubkey-db42a60e-37ea5438.(none)
gpg-pubkey-e42d547b-3960bdf1.(none)
gpg-pubkey-e8562897-459f07a4.(none)

>        I get :
> 
>        Name        : gpg-pubkey                   Relocations: (not 
> relocatable)       Version     : a7048f8d                          
> Vendor: (none)
>        Release     : 3ff1defa                      Build Date: Wed 
> 11 Apr 2007 03:29:36 AM CEST
>        Install Date: Wed 11 Apr 2007 03:29:36 AM CEST      Build 
> Host: localhost       Group       : Public Keys                  
>  Source RPM: (none)       Size        : 0                            
>     License: pubkey       Signature   : (none)       Summary     : 
> gpg(Connie Sieh (Constance J. Sieh) <[log in to unmask]>)      
>  Description :
>        -----BEGIN PGP PUBLIC KEY BLOCK-----
>        Version: rpm-4.3.3 (beecrypt-3.0.0)
> 
>        mQGiBD/x3voRBADonMg9Vjira9HR8AceZX3tUKZITeRFbWG6+vhQDJUffbrG7bb1rQqQWqd1
>        [...]
>        -----END PGP PUBLIC KEY BLOCK-----
> 
>        for each pubkey still with the install date and buid host : localhost.

The "rpm --import" command will import a RPM-GPG-KEY file into the rpm
database. You can import the same key multiple times (where the -qa option
above will show duplicates if you do), but when installing SL for the first
time, the keys in /etc/pki/rpm-gpg aren't all imported into the rpm database.

> > On a side note, the key:
> > 
> > error: /etc/pki/rpm-gpg/RPM-GPG-KEY-cern: import read failed(0).
> > 
> > fails to import.
> >
> 
>        This one gives me :
> 
>        #### goubert:/etc/yum.repos.d > rpm -qi gpg-pubkey-1d1e034b-42bfd0c5
>        Name        : gpg-pubkey                   Relocations: (not 
> relocatable)       Version     : 1d1e034b                          
> Vendor: (none)
>        Release     : 42bfd0c5                      Build Date: Wed 
> 11 Apr 2007 03:29:36 AM CEST
>        Install Date: Wed 11 Apr 2007 03:29:36 AM CEST      Build 
> Host: localhost       Group       : Public Keys                  
>  Source RPM: (none)       Size        : 0                            
>     License: pubkey       Signature   : (none)       Summary     : 
> gpg(CERN Linux Support (RPM signing key for CERN Linux Support)
>  <[log in to unmask]>)       Description :
>        -----BEGIN PGP PUBLIC KEY BLOCK-----
>        Version: rpm-4.3.3 (beecrypt-3.0.0)

Yeah, for me it's:

# rpm -qi gpg-pubkey-1d1e034b-42bfd0c5
package gpg-pubkey-1d1e034b-42bfd0c5 is not installed

because of the import failure. That's run on a newly built SL5 server.

Regards,

Michael.

mQGiBEK/0MURBACv5Rm/jRnrbyocW5t43hrjFxlw/DPLTWiA16apk3P2HQQ8F6csEY/gmNmU
>        f4U8KB6ncxdye/ostSBFJmVYh0YEYUxBSYM6ZFui3teVRxxXqN921jU2GbbWGqqlxbDqvBxD
>        EG95pA9oSiFYalVfjxVv0hrcrAHQDW5DL2b8l48kGwCgnxs1iO7Z/5KRalKSJqKx70TVIUkD
>        /2YkkHjcwp4Nt1pPlKxLaFp41cnCEGMEZVsNIQuJ1SgHyMHKBzMWkD7QHqAeW3Sa9CDAJKoV
>        PHZK99puF8etyUpC/HfmOIF6jwGpfG5AS7YbqHX6vitRlQt1b1aq5K83J8Y0+8WmjZmCQY6+
>        y2KHOPP+zHWKe5TJDeqDnN0jsZsKA/441IF4JJTPEhvRFsPJO5WKg1zGFbxRPKvgi7+YY6pJ
>        0VFbOMcJVMkvSZ2w4QRD+2ets/pRxNhITHfPToMV3lhC8m1Je5fzoSvSixgH/5o9mekWWSW7
>        Uq7U0IWA7OD7RraJRrGxy0Tz3G+exA7svv/zn9TW/BaHFlMHoyyDHOYZmIhhBB8RAgAhBQJC
>        v+/uFwyAEeb+6rc8Txi4s8pfgZAf4xOTel99AgcAAAoJEF4D/eUdHgNLGCgAmwduKegSOBXp
>        De061zF8NoN6+OFiAJ9nKo+uC6xBZ9Ey550SmhFCPPA2/rRTQ0VSTiBMaW51eCBTdXBwb3J0
>        IChSUE0gc2lnbmluZyBrZXkgZm9yIENFUk4gTGludXggU3VwcG9ydCkgPGxpbnV4LnN1cHBv
>        cnRAY2Vybi5jaD6IWgQTEQIAGgUCQr/QxQULBwMCAQMVAgMDFgIBAh4BAheAAAoJEF4D/eUd
>        HgNL/HsAn1ntKwRoSA9L0r8UyF7Zqn3U79m1AJ9Y4NsSE/dlFYLfmf0+baoq7b5asIicBBMB
>        AgAGBQJCv9DjAAoJEPy9YCiWu335GTwEALjUQ7+cHxi0sifstCLoyRYQSu7Eas0M1UD2ZxSQ
>        NBnYsx4rDZJk9TmK7QCzR1yRw9aixzZsRlNbed5VPxSzn89PE5m7Sx1bpl89sPgZ4BY95AL2
>        wExyDWRp1ON2+ztYeYtT7ZCkmeM+PBzt6RHR/jo3361faBS+qOkmpiiRWf3XiEYEExECAAYF
>        AkK/0WAACgkQkB/jE5N6X33DFQCgkvy1ruogu5Ibs5CzGY/ALiSJhyAAn3ygn3p/xrNQ8Dy5
>        j4KfgJINoxT4iEYEEBECAAYFAkK/9CcACgkQDIloXtlLxZSiRACdG0kTKlB4X4VBocUyxMRe
>        O9e5MvsAoIKWgcJYE8AGmRXjfIisCAzPtVX+iEYEExECAAYFAkK/8oUACgkQtQgG0wyY/52z
>        1ACgkkxNdhHKbEol3Kwka1tICWHMIwIAn3PWJQR0C1MV1+CnT8UupHzxy6J7
>        =IUD3
>        -----END PGP PUBLIC KEY BLOCK-----
> 
> > [...]
> 
> -- 
>                  Best regards,
>                                Robert FRANCHISSEUR
> 
>  ____ Apollo_gist :-)_______________________________________________
> | Robert FRANCHISSEUR                                               |
> | Laboratoire de Météorologie Dynamique -                  C.N.R.S. |
> | Equipe "R.A.M.S.E.S." -       UPMC       -   Tour 45-55 3ème 315C |
> | Boite 99 - 4, place Jussieu        F-75252 PARIS CEDEX 05  FRANCE |
> | Phone  : +33 (0)1 44 27 73 87          fax : +33 (0)1 44 27 62 72 |
> | e-mail : robert at lmd . jussieu . fr   http://www.lmd.jussieu.fr |
>  -------------------------------------------------------------------
------- End of Original Message -------