[prev in list] [next in list] [prev in thread] [next in thread] 

List:       opensuse-autoinstall
Subject:    RE: [Probable SPAM]  [opensuse-autoinstall] /add_on_products.xml  - User does not want to trust key
From:       <discip () pjm ! com>
Date:       2010-11-18 15:53:33
Message-ID: DFFD8D98B037B449BF5591DB88FBFBE6F51026 () EXC11VWP ! corp ! ds ! pjm ! com
[Download RAW message or body]

I'm having the same problem both with adding packages to the SLES 11 SP1
media (and resigning) as well as if I create a new add-on repository for
my custom RPM and sign that.  I also tried updating the initrd on the
boot media to include my gpg key as well, and that has not helped.  At
this point, I'm really stuck without a good way to add RPMs to my
autoinstall image.  I was able to do this in the SLE10SP2 installer by
simply disabling all the checking, but those options don't seem to be
honored any longer.

Is there something that I'm missing.  This seems like it's much harder
than it needs to be.  If there's an easier way to do this (maybe a
different repository type that doesn't need all this structure and
signing, etc), I'm all ears.

~Paul

-----Original Message-----
From: discip@pjm.com [mailto:discip@pjm.com] 
Sent: Thursday, November 18, 2010 10:12 AM
To: rgunreben@isarflow.de; opensuse-autoinstall@opensuse.org
Subject: RE: [Probable SPAM] [opensuse-autoinstall] /add_on_products.xml
- User does not want to trust key

Did you find a solution to this?  I am having the same problem on SLES11
SP1.  
Here's a the <general><signature-handling> section of my autoinst.xml
file:

<signature-handling>
      <accept_non_trusted_gpg_key>
         <all config:type="boolean">true</all>
         <keys config:type="list">
           <keyid>AC3CE2DA24428598</keyid>
         </keys>
      </accept_non_trusted_gpg_key>
      <import_gpg_key>
         <all config:type="boolean">true</all>
         <keys config:type="list">
           <keyid>AC3CE2DA24428598</keyid>
         </keys>
      </import_gpg_key>
      <accept_file_without_checksum
config:type="boolean">true</accept_file_without_checksum>
      <accept_unknown_gpg_key
config:type="boolean">true</accept_non_trusted_gpg_key>
      <accept_unsigned_file
config:type="boolean">true</accept_unsigned_file>
      <accept_verification_failed
config:type="boolean">true</accept_verification_failed>
    </signature-handling>


And I see this in my y2log:
2010-11-18 09:59:02 <1> <ip address>(3349) [Pkg]
Callbacks.cc(askUserToAcceptKey): 1658 Callback ImportGpgKey not
registered, using default value: false
2010-11-18 09:59:02 <1> <ip address>(3349) [zypp::KeyRigh]
KeyRing.cc(verifyFileSignatureWorkflow): 417 User does not want to trust
key AC3CE2DA2448598 ..

~Paul

-----Original Message-----
From: Ruediger Gunreben [mailto:rgunreben@isarflow.de] 
Sent: Friday, October 15, 2010 4:24 AM
To: opensuse-autoinstall@opensuse.org
Subject: [Probable SPAM] [opensuse-autoinstall] /add_on_products.xml -
User does not want to trust key

Hi,

I'm currently building a SLES11 SP1 Image and using this customized CD
for a pxe boot.
During boot and scanning the /add_on_products.xml file the installation
complains about the repository.
In the y2log these comments werde made:

---- snip
Callback ImportGpgKey not registered, using default value: false
(verifyFileSignatureWorkflow):417 User does not want to trust key
62A0C0D5C5....
---- snip

Where is the switch to trust the key?

The installation procedure then using a profiles directory structure
with the same repositories in. In this case everything works well - In
the profiles xml file the gpg/pgp switch are all set to trust unknown
keys.

Thanks in advance
Regards
Ruediger

-- 

 Ruediger Gunreben
-- 
To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org

-- 
To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org

-- 
To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org


[prev in list] [next in list] [prev in thread] [next in thread]