View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0001500channel: elrepo/el8elrepo-releasepublic2025-01-10 01:582025-01-12 10:25
Reporterbirkosan Assigned Topperry  
PrioritynormalSeverityminorReproducibilityalways
Status resolvedResolutionfixed 
Summary0001500: Signature error on latest kernel-lt-5.4.289-1
DescriptionAm I missing something?

I have the right key installed:

[root@wsrv tmp]# rpm -qi gpg-pubkey-baadae52-49beffa4
Name : gpg-pubkey
Version : baadae52
Release : 49beffa4
Architecture: (none)
Install Date: Thu 26 Oct 2023 09:48:07 AM EEST
Group : Public Keys
Size : 0
License : pubkey
Signature : (none)
Source RPM : (none)
Build Date : Tue 17 Mar 2009 03:40:52 AM EET
Build Host : localhost
Relocations : (not relocatable)
Packager : elrepo.org (RPM Signing Key for elrepo.org) <secure@elrepo.org>
Summary : gpg(elrepo.org (RPM Signing Key for elrepo.org) <secure@elrepo.org>)
Description :
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.3 (NSS-3)
                                                                                  
mQGiBEm+/6QRBAC5mbtqOFSQ0FkTLIMdIoqxtraIeUqwbPp3IBYQ/u/EREjyEf1D
qFyBEXII0dD8JDT85vRZ81jhB7nFWa0VbUfY0xfghkbnokiNBVNpiQcvszw3UYDF
aLAaOC8Z98vmlsQaBBTQG6704ZXLr7FJyG3GP5WE6egXIQQbrMcdmCoRBwCg/dwC
HLWjuemoDc5SX7hKHbB4zZ8D/jP+oMbqz+bDn8OZ2UuaGdxr+mHW8tzTdPjnEU8e
hUt1ws8eBqn/gMfKvUBa8xFSILe8Ty99u+VjFbcRsdf0H6dRre9AdDVUz5oxzoPw
gamA8mhPQvFh3wt9smtRUh5IoM2LiM1s5pGMLuYuvSnVUPArEnSfW6K5I6v7OarU
3WfrBACDEGGcaWKjfdkRtmKIQrzu6AnldVC1ISLVAoqxHnKNFTk1BgO0PSZDpfJI
x8fMCnGlusoL6F5+LYEk4K4B0zvlj1ur3JocjxpuBLccl94JTo/+I9ZbS8ptUqLw
LBUkgIQJzzIH4G5NZsQ3FpzSWGRFVa7etqTv9BfUMUmJxhEoobQ/ZWxyZXBvLm9y
ZyAoUlBNIFNpZ25pbmcgS2V5IGZvciBlbHJlcG8ub3JnKSA8c2VjdXJlQGVscmVw
by5vcmc+iGAEExECACAFAkm+/6QCGwMGCwkIBwMCBBUCCAMEFgIDAQIeAQIXgAAK
CRAwm8MFuq2uUlgWAKCGWOpyodbzxS7Xy/0X9m9qVnHq+ACfUHrQzYAtFRpT07Sg
giosE+mvAKu5Ag0ESb7/pxAIALgT0q0HhwugE717a7N+gAtCbFu8pCXOZcrAnJpG
cMA9VWmsODZStPTxXYM2ggCMSzUnNis8pPZOPIP5C+t2IYtVjLshM4C9UiY7u5ET
jErWCxWmF+2QLO50K56E4qxj0wufZt9P+Ih0USUM5L2oyrQG51uj/2v3Qq3igc8Z
NTtmEOfis3losusQbAfZtTBmNQ0570kkhMxiyavgAUxLenXHYrkDJFuL7XdBCmna
kykTn2dzU81rIDZ+QPxII4V/eZ5xGiRY/EDUIAysEV2m0NNZgWi/twUnZICm7zYp
VRviJrBnFTvNEPMhiGRnJgQp/Krv4WIHQ67N8lQg3q5RJX8AAwUH/0UBjBgbsuWR
dB+ZYWjKPBy+bJY/6HefPUuLrt3QDNINMW8kY7VzWRMWyGc4IlPJDW0nwOn/vT5H
Dgc3YmA3tm7cKj5wpFijzff61Db8eq+CUKGscKxDBGzHq6oirM5U7DQLmipCs5Eb
efwHIjE3aOUSnoQmniEnBWI2hm/rftmY9oJSi8xgns4wAokDPiMcucADtbV3fznx
ppuowtBi8bcGB1vJZjTySQcSKWv+IVp5ej06uZ9501BEm6HxUZkuAGPecP65kcQu
5bg7B7LQeI5AWyujqvfuWgAF34xhl9QU/sDWxM3wUog+bw7y8pyWCqnJhp70yx8o
SqzhFygT62eISQQYEQIACQUCSb7/pwIbDAAKCRAwm8MFuq2uUq8PAKC1+E2pSwiS
oHXkKYPYDwApsP1mVACfRe1YnggLYQtG9LMeweVQQC77rK8=
=qyRr
-----END PGP PUBLIC KEY BLOCK-----
Steps To Reproduce# dnf update kernel-lt
Last metadata expiration check: 0:00:27 ago on Fri 10 Jan 2025 08:54:04 AM EET.
Dependencies resolved.
=====================================================================================================================================================================================
 Package Architecture Version Repository Size
=====================================================================================================================================================================================
Installing:
 kernel-lt x86_64 5.4.289-1.el8.elrepo elrepo-kernel 91 k
 kernel-lt-core x86_64 5.4.289-1.el8.elrepo elrepo-kernel 30 M
 kernel-lt-modules x86_64 5.4.289-1.el8.elrepo elrepo-kernel 26 M
Removing:
 kernel-lt x86_64 5.4.286-1.el8.elrepo @elrepo-kernel 0
 kernel-lt-core x86_64 5.4.286-1.el8.elrepo @elrepo-kernel 66 M
 kernel-lt-modules x86_64 5.4.286-1.el8.elrepo @elrepo-kernel 25 M
                                                                                                                                                                                     
Transaction Summary
=====================================================================================================================================================================================
Install 3 Packages
Remove 3 Packages
                                                                                                                                                                                     
Total size: 56 M
Is this ok [y/N]: y
Downloading Packages:
[SKIPPED] kernel-lt-5.4.289-1.el8.elrepo.x86_64.rpm: Already downloaded
[SKIPPED] kernel-lt-core-5.4.289-1.el8.elrepo.x86_64.rpm: Already downloaded
[SKIPPED] kernel-lt-modules-5.4.289-1.el8.elrepo.x86_64.rpm: Already downloaded
ELRepo.org Community Enterprise Linux Kernel Repository - el8 1.6 MB/s | 1.7 kB 00:00
GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org (0xBAADAE52) is already installed
The GPG keys listed for the "ELRepo.org Community Enterprise Linux Kernel Repository - el8" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: kernel-lt-5.4.289-1.el8.elrepo.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org
Public key for kernel-lt-core-5.4.289-1.el8.elrepo.x86_64.rpm is not installed. Failing package is: kernel-lt-core-5.4.289-1.el8.elrepo.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org
Public key for kernel-lt-modules-5.4.289-1.el8.elrepo.x86_64.rpm is not installed. Failing package is: kernel-lt-modules-5.4.289-1.el8.elrepo.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED
Additional InformationI downloaded the last two versions and there is a signature difference:

# rpm -qpi kernel-lt-5.4.288-1.el8.elrepo.x86_64.rpm
Name : kernel-lt
Version : 5.4.288
Release : 1.el8.elrepo
Architecture: x86_64
Install Date: (not installed)
Group : System Environment/Kernel
Size : 0
License : GPLv2
Signature : DSA/SHA256, Fri 20 Dec 2024 05:36:04 AM EET, Key ID 309bc305baadae52
Source RPM : kernel-lt-5.4.288-1.el8.elrepo.nosrc.rpm
Build Date : Fri 20 Dec 2024 04:22:15 AM EET
Build Host : Build64R8.elrepo.org
Relocations : (not relocatable)
Packager : Akemi Yagi <toracat@elrepo.org>
Vendor : The ELRepo Project (https://elrepo.org)
URL : https://www.kernel.org/
Summary : The Linux kernel. (The core of any Linux-based operating system.)
Description :
The kernel-lt meta package.

# rpm -qpi kernel-lt-5.4.289-1.el8.elrepo.x86_64.rpm
warning: kernel-lt-5.4.289-1.el8.elrepo.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID eaa31d4a: NOKEY
Name : kernel-lt
Version : 5.4.289
Release : 1.el8.elrepo
Architecture: x86_64
Install Date: (not installed)
Group : System Environment/Kernel
Size : 0
License : GPLv2
Signature : RSA/SHA256, Fri 10 Jan 2025 12:05:38 AM EET, Key ID 51600989eaa31d4a
Source RPM : kernel-lt-5.4.289-1.el8.elrepo.src.rpm
Build Date : Thu 09 Jan 2025 11:15:32 PM EET
Build Host : Build64R8.elrepo.org
Relocations : (not relocatable)
Packager : S.Tindall <s10dal@elrepo.org>
Vendor : The ELRepo Project (https://elrepo.org)
URL : https://www.kernel.org/
Summary : The Linux kernel. (The core of any Linux-based operating system.)
Description :
The kernel-lt meta package.
TagsNo tags attached.

Activities

pperry

2025-01-10 06:04

administrator   ~0010250

Last edited: 2025-01-12 10:25

 Hi,

Sorry, we were in the process of releasing a new RPM signing key, and our latest kernel packages were signed with the new key before it was released.

Here is the new (v2) RPM signing key:

https://www.elrepo.org/RPM-GPG-KEY-v2-elrepo.org

Please import the new v2 key, and check it's fingerprint matches below:

$ gpg --list-keys --fingerprint 'elrepo.org (RPM Signing Key v2 for elrepo.org) <secure@elrepo.org>'
pub 4096R/EAA31D4A 2025-01-05
      Key fingerprint = B8A7 5587 4DA2 40C9 DAC4 E715 5160 0989 EAA3 1D4A
uid elrepo.org (RPM Signing Key v2 for elrepo.org) <secure@elrepo.org>
sub 4096R/D3ECCB2A 2025-01-05

We will update our website with the new key details and release an updated elrepo-release package containing the new key ASAP

[EDIT] In the meantime, please run:

# rpm --import https://www.elrepo.org/RPM-GPG-KEY-v2-elrepo.org

pperry

2025-01-10 09:02

administrator   ~0010251

An updated elrepo-release package for el8 (and el9) has now been released with the new signing key.

Importing the new key into the RPM database should resolve this issue.

Please could you confirm this resolves the issue for you?

Thanks

birkosan

2025-01-10 09:07

reporter   ~0010252

Yes, it's working now.
Thank you!

Issue History

Date Modified Username Field Change
2025-01-10 01:58 birkosan New Issue
2025-01-10 01:58 birkosan Status new => assigned
2025-01-10 01:58 birkosan Assigned To => pperry
2025-01-10 06:04 pperry Note Added: 0010250
2025-01-10 09:02 pperry Note Added: 0010251
2025-01-10 09:02 pperry Status assigned => feedback
2025-01-10 09:07 birkosan Note Added: 0010252
2025-01-10 09:07 birkosan Status feedback => assigned
2025-01-11 10:21 pperry Status assigned => resolved
2025-01-11 10:21 pperry Resolution open => fixed
2025-01-12 10:13 toracat Note Edited: 0010250
2025-01-12 10:25 toracat Note Edited: 0010250