Import gpg key

Like a lot of people are doing, I’m trying to install Zoom in Tumbleweed. The Zoom download site has a note about using rpm --import command to add the key when installing. This is the syntax:

rpm --import package-signing-key.pub

The result is “import read failed(2)”. I can also download the public key but I don’t know what to do with it. Seems like the import option should have a target instead of just a generic package key. Does anyone know if the syntax is right?

I have usually handled that with: Yast Software Repositories

There’s a button for GPG keys (near bottom right). Click on that, and there is an option to add a key.

If you’re trying to configure the GPG key for a repository,
Zypper (the openSUSE command line package manager) provides a way to auto-accept the key that’s presented when challenged… Much easier than other distros where you typically have to download the GPG key file and either configure or import.

I list this as one of several useful zypper commands that can make your life easier…

https://en.opensuse.org/User:Tsu2/BASH_zypper

TSU

I just have the rpm package, I don’t know if Zoom has a repo I can add.

The official Zoom directions for installing the RPM does not mention any signing key,
Whether installing using YaST Software Manager or zypper

https://support.zoom.us/hc/en-us/articles/204206269-Installing-or-updating-Zoom-on-Linux#h_ba1016b2-ef94-4032-a219-c6c32093b6eb

That’s a long list of dependencies…
There’s no mention whether those dependencies will be automatically selected by YaST or zypper,
You should try not installing the dependencies first to see if the package manager will automatically select, else if that doesn’t work then post here and I or someone else can create a single command that installs all those packages.

TSU

Zypper pulls in 4 pkgs to solve dependencies: ibus-m17n libm17n0 libotf0 m17n-db. Then it says it’s looking for gpg key ID in cache /var/cache/zypp/pubkeys. No such directory exists. It also says “Repository Plain RPM files does not define additional ‘gpgkey=’ URLs”. Seems like the command as written doesn’t provide a source to import the key from.

Actually there is /var/cache/zypp/pubkeys but there’s nothing in it.

How are you installing, using YaST or zypper, and can you post the command you’re running.
Unless the package is explicitly coded to ask for a GPG key, ordinarily it shouldn’t be required.

TSU

You can try the following which I found from an unofficial source

wget -O Downloads/package-signing-key.pub https://zoom.us/linux/download/pubkey
#Import the key, use elevated permissions
rpm --import package-signing-key.pub

Also,
Related but off-topic…
Currently, there have been several problems reported related to Zoom software, of which the current most likely serious is that apparently anyone in your Zoom meeting can post an invitation and the invitation has no input validation… Therefor any participant in your meeting could post a link with malicious content which can phish or otherwise collect login credentials, of which the most nefarious would be if you login to what you believe is a business or school meeting that requires a network login (like AD or LDAP), you would be giving the hacker your personal hashed credentials for that business or school(of course can easily be decrypted).

TSU

May I please point out that Zoom is a big security risk? And really bad re. privacy. The news about it is all over the place, and the whole world doesn’t seem to care. Most of the issues are Windows ( Windows password can be retrieved through shared links to local file ) / Mac related ( camera and mic wide open to abuse ).

Hi
It does below the download button… manual install or check required…
https://zoom.us/linux/download/pubkey

@OP


su -

rpm -qa gpg-pubkey*

gpg-pubkey-3dbdc284-53674dd4
gpg-pubkey-479de3c9-5d93eb05
gpg-pubkey-39db7c82-5847eb1f
gpg-pubkey-a7293a7b-59b1d3f4
gpg-pubkey-97090d5e-5cc1dcf3
gpg-pubkey-307e3d54-5aaa90a5

rpm -K /data/repositories/Downloads/zoom_openSUSE_x86_64.rpm 
/data/repositories/Downloads/zoom_openSUSE_x86_64.rpm: digests SIGNATURES NOT OK <== BAD

rpm --import /data/repositories/Downloads/package-signing-key.pub 
warning: Rebuilding outdated index databases
warning: Generating 18 missing index(es), please wait...

rpm -qa gpg-pubkey*

gpg-pubkey-3dbdc284-53674dd4
gpg-pubkey-61a7c71d-55740c4b <== NEW
gpg-pubkey-479de3c9-5d93eb05
gpg-pubkey-39db7c82-5847eb1f
gpg-pubkey-a7293a7b-59b1d3f4
gpg-pubkey-97090d5e-5cc1dcf3
gpg-pubkey-307e3d54-5aaa90a5

rpm -K /data/repositories/Downloads/zoom_openSUSE_x86_64.rpm 
/data/repositories/Downloads/zoom_openSUSE_x86_64.rpm: digests signatures OK <== GOOD

zypper in /data/repositories/Downloads/zoom_openSUSE_x86_64.rpm

The following 9 NEW packages are going to be installed:
  ibus ibus-dict-emoji ibus-gtk ibus-gtk3 ibus-m17n libm17n0 libotf0 m17n-db zoom
.....
.....
(9/9) Installing: zoom-3.5.374815.0324_openSUSE-1.x86_64 ................................................................................................................................[done]
Additional rpm output:
run post install script, action is 1...
current home is /root
Executing %posttrans scripts ............................................................................................................................................................[done]

You can import the key via YaST Software Repositories as well…

Hi
Most zoom issues are related to the ‘free’ one and doesn’t set a password (or asks users too?). No issues seen here on the business/corporate edition with it’s humongous passwords :wink:

With the gpg pubkey command I got seven keys, none of which were 55740c4b. With the command that uses /data/repositories/Downloads I got ‘No such file or directory’. With the rpm --import command I got ‘import read failed(2)’.

Hi
That’s the path to where the file downloaded on my system, you need to do the same :wink:

The first rpm command you listed did not give me the same result.

rpm -K /data/repositories/Downloads/zoom_openSUSE_x86_64.rpm

results in
error: /data/repositories/Downloads/zoom_openSUSE_x86_64.rpm: open failed: No such file or directory.

Hi
Again, that’s the path to my download, you have to use the one where your download is :wink:

Ok, I got it now. Sorry I was so slow to get your meaning. Thanks for the help.

Hi
So it all worked as expected?

Yes! Zoom is installed and working.

https://support.zoom.us/hc/en-us/articles/204206269-Installing-Zoom-on-Linux#open-suse