Results 1 to 8 of 8

Thread: Packman GPG key expired

  1. #1
    Join Date
    Jun 2008
    Location
    Brisbane Australia
    Posts
    30

    Default Packman GPG key expired

    I note that the packman GPG key has expired. I imported the key but find that it is still expired (18/9/2008). Some of the other repository keys do not appear to have an expiry date and others are a couple of years into the future. YAST will not allow be to edit the key to change the expiry - edit grayed out

    Any ideas??

    Dave

  2. #2

    Default Re: Packman GPG key expired

    If the consequence of this is that whenever you re-boot, you are asked whether "you trust the source of these packages. Repository Name: Packman Repository.", I'd be interested in the answer to this too.

  3. #3
    Join Date
    Jun 2008
    Location
    UTC+10
    Posts
    9,686
    Blog Entries
    4

    Default Re: Packman GPG key expired

    Quote Originally Posted by owise1 View Post
    YAST will not allow be to edit the key to change the expiry - edit grayed out
    Well of course not, the expiry date is an integral part of the key. If it were editable, fakers could revive old keys and pass them off as current.

    Only thing to do is to wait for Packman to issue a new key.

  4. #4
    Join Date
    Jun 2008
    Location
    Brisbane Australia
    Posts
    30

    Default Re: Packman GPG key expired

    I leave my PC on 24/7 - I noticed because the online update icon shows a yellow triangle and I get the following error:

    Refresh failed: . Error: refusing unsigned file repomd.xml Error: Could not refresh repository 'Packman Repository': Valid metadata not found at specified URL(s) History: - Signature verification failed for repomd.xml

    I can use the online update via YAST and accept the unsigned .xml file but that misses the point of the notification

  5. #5
    Join Date
    Jun 2008
    Location
    UTC+10
    Posts
    9,686
    Blog Entries
    4

    Default Re: Packman GPG key expired

    You could disable the Packman repo for the time being to avoid the yellow triangle.

    I find it strange though that the Packman maintainers didn't see this coming up.

  6. #6
    Join Date
    Jun 2008
    Location
    where I am is where I am
    Posts
    1,164

    Default Re: Packman GPG key expired

    Quote Originally Posted by ken_yap View Post
    You could disable the Packman repo for the time being to avoid the yellow triangle.

    I find it strange though that the Packman maintainers didn't see this coming up.
    I too find it odd but it seems to be an annual event usually lasts about a week then no problems after that for about a year.
    I'm just a curious cat
    My 64 bit: RADEON RX 570 |CPU AMD - Ryzen 5 1600
    MOTHERBOARD B450M D53H GGABYTE
    Opensuse Tumbleweed Plasma 5

  7. #7
    skibum58 NNTP User

    Default Re: Packman GPG key expired

    Hmmm. Security as an afterthought at Packman? Guess they must have forgotten to put it in their Outlook. Oh, wait....

  8. #8

    Default Re: Packman GPG key expired

    Packman's new signing key is now available. It does not expire until 09/21/2010.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •