OBS keys expired

English Applications
1

I get an expired key warning every time I add a repo from the OBS. Creation/expiration dates are the same each time. This alway happens in the OBS, not Packman or elsewhere. I’ve tried cleaning the metadata and cache, and doing a rebuild with rpm. I’ve removed all of the existing keys associated w/OBS. Somebody know what this is about? I can’t think of anything else to try.

New repository or package signing key received:
Key ID: 9584A164BD6D129A
Key Name: Apache OBS Project <Apache@build.opensuse.org>
Key Fingerprint: EDDDC98D96A0F8899AB07C789584A164BD6D129A
Key Created: Tue Jan 22 12:45:36 2008
Key Expires: Thu Apr  1 13:45:36 2010 (EXPIRED)
Repository: Apache
2

I have to get this working, there are several packages I need to upgrade but there’s something wrong with my system (or I’ve been blacklisted by OBS :O). Doesn’t anyone have an idea what’s behind this?

3

On 2010-07-28 04:36, chief sealth wrote:
>
> I get an expired key warning every time I add a repo from the OBS.
> Creation/expiration dates are the same each time. This alway happens in
> the OBS, not Packman or elsewhere. I’ve tried cleaning the metadata and
> cache, and doing a rebuild with rpm. I’ve removed all of the existing
> keys associated w/OBS. Somebody know what this is about? I can’t think
> of anything else to try.
>
>
> Code:
> --------------------
> New repository or package signing key received:
> Key ID: 9584A164BD6D129A
> Key Name: Apache OBS Project <Apache@build.opensuse.org>
> Key Fingerprint: EDDDC98D96A0F8899AB07C789584A164BD6D129A
> Key Created: Tue Jan 22 12:45:36 2008
> Key Expires: Thu Apr 1 13:45:36 2010 (EXPIRED)
> Repository: Apache
> --------------------

It is a new key which you have to accept or reject, which has apparently expired, for the apache
repo. So, contact them and tell them of the situation.

–
Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” GM (Elessar))

4

That was my original thought, but it happens on all OBS repos, not just Apache, with identical dates.

5

On 2010-07-29 19:36, chief sealth wrote:
>
> That was my original thought, but it happens on -all- OBS repos, not
> just Apache, with identical dates.

You are right.

I went to <http://download.opensuse.org/repositories/Apache:/Modules/openSUSE_11.3/>, downloaded
“Apache:Modules.repo”. Inside I read:


[Apache_Modules]
name=This project contains third-party modules for the Apache HTTP server. (openSUSE_11.3)
type=rpm-md
baseurl=http://download.opensuse.org/repositories/Apache:/Modules/openSUSE_11.3/
gpgcheck=1
gpgkey=http://download.opensuse.org/repositories/Apache:/Modules/openSUSE_11.3/repodata/repomd.xml.key
enabled=1

I then downloaded that gpgkey, and run:

gpg --import repomd.xml.key

Then I went to
<http://download.opensuse.org/repositories/GNOME:/STABLE:/2.30/openSUSE_11.3/repodata/>, downloaded
the key in there.

Then, run “gpg --list-keys”:

pub 1024D/BD6D129A 2008-01-22 [expired: 2010-04-01]
uid Apache OBS Project <Apache@build.opensuse.org>

And the other might be this one:

pub 1024D/6B9D6523 2006-05-24 [expired: 2008-05-23]
uid openSUSE Build Service <buildservice@opensuse.org>

I wrote bugzilla (Bug 626876).

–
Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” GM (Elessar))

6

Thanks for confirming this. It was beginning to drive me crazy. :stuck_out_tongue:

7

On 2010-07-30 04:36, chief sealth wrote:
>
> Thanks for confirming this. It was beginning to drive me crazy. :stuck_out_tongue:

Well, I have reported this as bugzilla, which has been closed as “WONTFIX”. I have reported this in
the security mail list and the project mail list. Nobody cares.

I quit, I can’t do more. Go install something else, people.

–
Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” GM (Elessar))