From: tek (tekpervasivenetwerks.com)
Date: Sat Dec 20 2003 - 02:17:22 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

upon further googling i found this snippet in a forum on the exact same
key

> On Wed, 2003-05-28 at 15:18, Charles A Edwards wrote:
>> Is it just me or do all pkgs recently submitted by Oden Eriksson
>> fail for everyone.

to which Lonnie Borntreger posted

> Just posted this in another thread.
> gpg --keyserver wwwkeys.us.pgp.net --recv-keys 604aa4e4
> gpg --export -a 604aa4e4 > 604aa4e4.asc
> rpm --import 604aa4e4.asc

so upon knowing who's key it is i imported it and now we get this
message which is almost as bad as the first one i think.

The following packages have bad signatures:
/var/cache/urpmi/rpms/chkrootkit-0.41-1mdk.i586.rpm: Invalid Key ID
((sha1) dsa sha1 md5 gpg GPG#604aa4e4 OK)
Do you want to continue installation ? (y/N) N

? ? ?
Tnt

---------- Forwarded Message -----------
From: "tek" <tekpervasivenetwerks.com>
To: discussmandrakesecure.net
Sent: Fri, 19 Dec 2003 23:10:33 -0800
Subject: chkrootkit-0.41 Invalid signature?

doing an update of a box i just ran across this, it hasnt installed
cause it failed for signatures but of all packages to fail this one
scares the hell out of me or am i just paranoid?

chkrootkit-0.41-1mdk.i586.rpm: Invalid signature ((SHA1) DSA sha1 md5
(GPG) (MISSING KEY) GPG#604aa4e4 NOT OK)

Tnt
------- End of Forwarded Message -------

--
o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o
| Linux Solutions Provider, Linux Consultant and IT Services. |
0 Windows to Linux Migration Specialists 0
| http://www.pervasivenetwerks.com |
o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o
              PGP Key Fingerprint
AA05 B115 5019 754A A151 04F2 822D A1C9 EAB6 AA5B

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]