OT? rpm --checksig problem

[Raif S. Naffah]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

hello engage,

On Mon, 1 Dec 2003 05:10 am, engage wrote:
> On Saturday 29 November 2003 09:00 pm, David R. Bergstein wrote:
> >On Saturday 29 November 2003 09:35 pm, engage wrote:
> >> Even though the public keys are on the keyring, running rpm
> >> --checksig on packages tell me that the key is missing. I tried
> >> downloading the packages from a different mirror but get the same
> >> problem. I even tried rpm --import <pubkey> but that didn't help
> >> either. This began after a fresh install of Mandrake 9.2 (was
> >> running 9.0). GnuPG 1.2.3-3.1.92mdk.
> >
> >You may need to see if the path for the public keyring that RPM uses
> > in MDK 9.2 is different than 9.0.   On my MDK 9.0 systems, the file
> > that controls this behaviour is /etc/rpm/macros (see below for
> > sample).
> >
> ># /etc/rpm/macros
> >%_signature     gpg
> >%_gpg_path      /etc/rpm-keys
>
> I added the %signature line. The /etc/rpm-keys doesn't exist anywhere
> on my system.
>
> Adding the one line didn't help. As for /etc/rpm-keys, not sure of
> what to do about that. I don't even know if that'll help even if it
> is created.

the value for the %_gpg_path should be the location of _your_ keyrings;  
by default this would be ~/.gnupg.  for more info on these incantations 
see <http://www.rpm.org/max-rpm/> or do a 'man rpm' and go to the 
'USING GPG TO SIGN PACKAGES' section.

you mentioned you're using Mandrake, but beware that the rpm package may 
be suffering the same symptom that the Red Hat one is.  see 
<https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=90952>.


cheers;
rsn
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Que du magnifique

iD8DBQE/yjka+e1AKnsTRiERAy8VAKDw19cSagFMo+OXubPjj+nDGoG1NgCfeR7e
hGw6PJd7BHaDhtkVP5p3cA8=
=hfdC
-----END PGP SIGNATURE-----