"CentOS-6 - Debuginfo" gpgkey does not match

General support questions
Post Reply
parkyoungs
Posts: 1
Joined: 2016/04/25 10:58:44

"CentOS-6 - Debuginfo" gpgkey does not match

Post by parkyoungs » 2016/05/17 13:11:06

I'm trying to install kernel-debuginfo package, but i doesn't work with the messages below

Code: Select all

 # yum --enablerepo=base-debuginfo install kernel-debuginfo-`uname -r`
......
Downloading Packages:
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-Debug-6

The GPG keys listed for the "CentOS-6 - Debuginfo" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.
--------------
I checked if the RPM-GPG-KEY-CentOS-Debug-6 file is changed, but it's ok.
(fingerprint is the same with the page,https://www.centos.org/keys/)

Code: Select all

# gpg --quiet --with-fingerprint /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-Debug-6
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
pub  4096R/D0FF3D16 2011-07-03 CentOS-6 Debuginfo Key (CentOS-6 Debuginfo Signing Key) <centos-6-debug-key@centos.org>
      Key fingerprint = 69B3 0F26 BA2B 3AA4 C27C  E4F5 3B75 CF79 D0FF 3D16
----------------------
If I turn the gpgcheck option off, It will probably download and install the package well.
But I don't want to turn if off because of the security reason
I wonder why the gpgkey does not match even when I download the kernel-debuginfo package from http://debuginfo.centos.org/

below is the CentOS-Debuginfo.repo file and it's not changed since os installation

Code: Select all

# cat CentOS-Debuginfo.repo
# CentOS-Debug.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client.  You should use this for CentOS updates
# unless you are manually picking other mirrors.
#

# All debug packages from all the various CentOS-5 releases
# are merged into a single repo, split by BaseArch
#
# Note: packages in the debuginfo repo are currently not signed
#

[base-debuginfo]
name=CentOS-6 - Debuginfo
baseurl=http://debuginfo.centos.org/6/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-Debug-6
enabled=0

agi
Posts: 5
Joined: 2018/02/22 00:23:04
Contact:

Re: "CentOS-6 - Debuginfo" gpgkey does not match

Post by agi » 2019/05/01 23:21:27

Did you ever find solution to this?

Post Reply