Why am I getting a request to accept a new repository signature?

English Applications
#1

I have NVIDIA installed and I have the repo installed as well, but I have not made any changes to it. So why all of a sudden am I getting the following popup? Is it safe? Should I accept it?


Do you want to accept this repository signature?
package_id: dummy,0.0.1,i386,data
repository_name: NVIDIA_Repository_1
key_url: ftp://download.nvidia.com/opensuse/11.3/
key_userid:NVIDIA Corporation <linux-bugs@nvidia.com>
key_id: F5113243C66B6EAE
key_fingerprint: (I'm hiding this just in case it's a security risk)
key_timestamp: Thu Jun 15 12:13:18 2006
type: gpg

Also, why am I getting it now if it’s from 2006?

#2

You should have a key under something like /var/cache/zypp/raw/NVIDIA\ Repository/repodata/repomd.xml.asc - Just check if there is already a file. The repo name may be different if you did updates, etc.

#3

I have the files:
/var/cache/zypp/raw/NVIDIA_Repository_1/repodata/repomd.xml.asc
/var/cache/zypp/raw/NVIDIA_Repository_1/repodata/repomd.xml.key

But what does that mean? Should I still accept this popup? Or say no?

#4

Anyone who can help? How can I know if this is ok to accept?

#5

On 10/22/2010 07:36 AM, 6tr6tr wrote:
>
> I have NVIDIA installed and I have the repo installed as well, but I
> have not made any changes to it. So why all of a sudden am I getting the
> following popup? Is it safe? Should I accept it?
>
>
> Code:
> --------------------
>
> Do you want to accept this repository signature?
> package_id: dummy,0.0.1,i386,data
> repository_name: NVIDIA_Repository_1

Do a zypper lr -d at the CLI. I’m wondering if you have somehow added a
2nd instance of the nVidia repository. I would think it would be named
NVIDIA_Repository, not NVIDIA_Repository_1. But that’s just a wild guess.

> key_url: ftp://download.nvidia.com/opensuse/11.3/
> key_userid:NVIDIA Corporation<linux-bugs@nvidia.com>
> key_id: F5113243C66B6EAE
> key_fingerprint: (I’m hiding this just in case it’s a security risk)
> key_timestamp: Thu Jun 15 12:13:18 2006
> type: gpg
>
> --------------------
>
>
> Also, why am I getting it now if it’s from 2006?

Time warp? Where’s Dr. Who when you need him…

…Kevin

#6

On 2010-10-22 23:06, 6tr6tr wrote:
>
> Anyone who can help? How can I know if this is ok to accept?

Nobody can know for sure.

–
Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)

#7

I’m only showing one:

2 | NVIDIA_Repository_1 | NVIDIA Repository | Yes | Yes | 99 | rpm-md | ftp://download.nvidia.com/opensuse/11.3/ |

I think the reason it’s named that is originally I messed up and added NVIDIA for 11.2 but immeadiately noticed the error and went back in and changed it to 11.3 and maybe it renamed it to “_1” as a result?