View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0001478 | elrepo mirroring/distribution | package signing | public | 2024-08-29 12:03 | 2025-01-12 10:25 |
| Reporter | orion | Assigned To | pperry | ||
| Priority | normal | Severity | major | Reproducibility | always |
| Status | resolved | Resolution | fixed | ||
| Summary | 0001478: ELrepo RPM GPG signing key will need to be updated for EL10 | ||||
| Description | [root@vmcs10 yum.repos.d]# rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org error: Certificate 309BC305BAADAE52: Policy rejects 309BC305BAADAE52: No binding signature at time 2024-08-29T16:03:02Z error: /etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org: key 1 import failed. Looks like you will need a key signed with a SHA256 has in order for it to work with EL10. | ||||
| Tags | No tags attached. | ||||
|
|
Thanks for the heads up. |
|
|
# rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org error: Certificate 309BC305BAADAE52: Policy rejects 309BC305BAADAE52: No binding signature at time 2025-01-05T06:39:58Z error: https://www.elrepo.org/RPM-GPG-KEY-elrepo.org: key 1 import failed. # cat /etc/os-release NAME="CentOS Stream" VERSION="10 (Coughlan)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="10" PLATFORM_ID="platform:el10" PRETTY_NAME="CentOS Stream 10 (Coughlan)" ANSI_COLOR="0;31" LOGO="fedora-logo-icon" CPE_NAME="cpe:/o:centos:centos:10" HOME_URL="https://centos.org/" VENDOR_NAME="CentOS" VENDOR_URL="https://centos.org/" BUG_REPORT_URL="https://issues.redhat.com/" REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux 10" REDHAT_SUPPORT_PRODUCT_VERSION="CentOS Stream" |
|
|
We confirm the issue with RHEL 10 beta and are working on it. |
|
|
We have a new public RPM signing key available: https://www.elrepo.org/RPM-GPG-KEY-v2-elrepo.org $ gpg --list-keys --fingerprint 'elrepo.org (RPM Signing Key v2 for elrepo.org) <secure@elrepo.org>' pub 4096R/EAA31D4A 2025-01-05 Key fingerprint = B8A7 5587 4DA2 40C9 DAC4 E715 5160 0989 EAA3 1D4A uid elrepo.org (RPM Signing Key v2 for elrepo.org) <secure@elrepo.org> sub 4096R/D3ECCB2A 2025-01-05 This key will be the key used to sign elrepo packages for RHEL10, once released. The new key will also supercede our original RPM signing key for el8 and el9 packages with immediate effect. To import the new key, please run: # rpm --import https://www.elrepo.org/RPM-GPG-KEY-v2-elrepo.org |
|
|
The new key has been confirmed to work on a system running RHEL 10 beta. Marking the ticket as 'resolved'. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-08-29 12:03 | orion | New Issue | |
| 2024-08-29 12:03 | orion | Status | new => assigned |
| 2024-08-29 12:03 | orion | Assigned To | => pperry |
| 2024-08-29 12:48 | toracat | Note Added: 0010067 | |
| 2025-01-05 01:44 | rcpa0 | Note Added: 0010238 | |
| 2025-01-05 14:24 | toracat | Note Added: 0010242 | |
| 2025-01-10 06:02 | pperry | Note Added: 0010249 | |
| 2025-01-10 06:16 | pperry | Note Edited: 0010249 | |
| 2025-01-10 09:03 | pperry | Status | assigned => feedback |
| 2025-01-10 11:29 | toracat | Status | feedback => resolved |
| 2025-01-10 11:29 | toracat | Resolution | open => fixed |
| 2025-01-10 11:29 | toracat | Note Added: 0010253 | |
| 2025-01-12 10:22 | toracat | Note Edited: 0010249 | |
| 2025-01-12 10:25 | toracat | Note Edited: 0010249 |
