Hi,

At Beginning, I imported the gpg key. And I don't modify gpg keys.

The log is:

$ rpm -q gpg-pubkey --qf '%{name}-%{version}-%{release} --> %{summary}\n' | grep -i 64DAB85D
gpg-pubkey-64dab85d-57d33e22 --> gpg(Fedora 26 Primary (26) <fedora-26-primary@fedoraproject.org>)
$ sudo dnf upgrade -v
Loaded plugins: builddep, config-manager, copr, debug, debuginfo-install, download, generate_completion_cache, needs-restarting, playground, repoclosure, repograph, repomanage, reposync, system-upgrade
DNF version: 2.5.0
cachedir: /var/cache/dnf
repo: using cache for: robberphex-kitematic
not found deltainfo for: Copr repo for kitematic owned by robberphex
not found updateinfo for: Copr repo for kitematic owned by robberphex
robberphex-kitematic: using metadata from Wed May 31 03:48:48 2017 CST.
repo: using cache for: adobe-linux-x86_64
not found deltainfo for: Adobe Systems Incorporated
not found updateinfo for: Adobe Systems Incorporated
adobe-linux-x86_64: using metadata from Thu Apr 27 15:15:24 2017 CST.
Cannot download 'https://codecs.fedoraproject.org/openh264/26/x86_64/': repomd.xml GPG signature verification error: Bad GPG signature.
Error: Failed to synchronize cache for repo 'fedora-cisco-openh264'


On Fri, Jun 2, 2017 at 1:36 PM, Ed Greshko <ed.greshko@greshko.com> wrote:
On 06/02/17 12:10, Robert Lu wrote:
> I meet this bug: https://bugzilla.redhat.com/show_bug.cgi?id=1445817
> <https://bugzilla.redhat.com/show_bug.cgi?id=1445817>
>
> When I run dnf upgrade, it faild:
>
> Cannot download 'https://codecs.fedoraproject.org/openh264/26/x86_64/
> <https://codecs.fedoraproject.org/openh264/26/x86_64/>': repomd.xml
> GPG signature verification error: Bad GPG signature.
> Error: Failed to synchronize cache for repo 'fedora-cisco-openh264'
>
> So, I tried to verify repomd.xml manually, the result is:
>
> $gpg --list-keys
> $gpg --import  /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-26-x86_64
> gpg: key 64DAB85D: public key "Fedora 26 Primary (26)
> <fedora-26-primary@fedoraproject.org
> <mailto:fedora-26-primary@fedoraproject.org>>" imported
> gpg: Total number processed: 1
> gpg:               imported: 1  (RSA: 1)
> $gpg --list-keys
> /home/rlu/.gnupg/pubring.gpg
> ----------------------------
> pub   4096R/64DAB85D 2016-09-09
> uid                  Fedora 26 Primary (26)
> <fedora-26-primary@fedoraproject.org
> <mailto:fedora-26-primary@fedoraproject.org>>
>
> $gpg --verify repomd.xml.asc repomd.xml
> gpg: Signature made Sat 25 Mar 2017 02:41:50 AM CST using RSA key ID
> 64DAB85D
> gpg: Good signature from "Fedora 26 Primary (26)
> <fedora-26-primary@fedoraproject.org
> <mailto:fedora-26-primary@fedoraproject.org>>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the
> owner.
> Primary key fingerprint: E641 850B 77DF 4353 78D1  D7E2 812A 6B4B 64DA
> B85D
>
> I think this is a success result.
> But why dnf is failed?


Could it be because you're importing the key into your personal keyring?

What does

rpm -q gpg-pubkey --qf '%{name}-%{version}-%{release} --> %{summary}\n'
| grep -i 64DAB85D

return?

FYI....

[root@localhost ~]# rpm -q gpg-pubkey --qf
'%{name}-%{version}-%{release} --> %{summary}\n' | grep -i 64DAB85D
gpg-pubkey-64dab85d-57d33e22 --> gpg(Fedora 26 Primary (26)
<fedora-26-primary@fedoraproject.org>)

[root@localhost ~]# dnf config-manager --set-enabled fedora-cisco-openh264
[root@localhost ~]# dnf install gstreamer1-plugin-openh264 mozilla-openh264
Fedora 26 openh264 (From Cisco) - x86_64           4.5 kB/s | 2.8 kB
00:00
Fedora 26 - x86_64 - Test Updates                  2.0 MB/s |  22 MB
00:11
Fedora 26 - x86_64 - Updates                       2.3 kB/s | 257  B
00:00
Last metadata expiration check: 0:00:00 ago on Fri Jun 02 13:31:51 2017 CST.
Dependencies resolved.
===================================================================================
 Package                     Arch    Version
Repository              Size
===================================================================================
Installing:
 gstreamer1-plugin-openh264  x86_64  1.10.4-1.fc26
fedora-cisco-openh264   19 k
 mozilla-openh264            x86_64  1.6.0-5.fc26
fedora-cisco-openh264  364 k
Installing dependencies:
 openh264                    x86_64  1.6.0-5.fc26
fedora-cisco-openh264  359 k

Transaction Summary
===================================================================================
Install  3 Packages

Total download size: 743 k
Installed size: 2.0 M
Is this ok [y/N]: y
Downloading Packages:
(1/3): gstreamer1-plugin-openh264-1.10.4-1.fc26.x8  12 kB/s |  19 kB
00:01
(2/3): openh264-1.6.0-5.fc26.x86_64.rpm            172 kB/s | 359 kB
00:02
(3/3): mozilla-openh264-1.6.0-5.fc26.x86_64.rpm    170 kB/s | 364 kB
00:02
-----------------------------------------------------------------------------------
Total                                              347 kB/s | 743 kB
00:02
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing
:                                                           1/1
  Installing       :
openh264-1.6.0-5.fc26.x86_64                              1/3
  Running scriptlet:
openh264-1.6.0-5.fc26.x86_64                              1/3
  Installing       :
mozilla-openh264-1.6.0-5.fc26.x86_64                      2/3
  Installing       :
gstreamer1-plugin-openh264-1.10.4-1.fc26.x86_64           3/3
  Verifying        :
mozilla-openh264-1.6.0-5.fc26.x86_64                      1/3
  Verifying        :
gstreamer1-plugin-openh264-1.10.4-1.fc26.x86_64           2/3
  Verifying        :
openh264-1.6.0-5.fc26.x86_64                              3/3

Installed:
  gstreamer1-plugin-openh264.x86_64
1.10.4-1.fc26
  mozilla-openh264.x86_64
1.6.0-5.fc26
  openh264.x86_64
1.6.0-5.fc26

Complete!


--
Fedora Users List - The place to go to speculate endlessly
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org



--
Robert Lu <robberphex@gmail.com>
About me: http://about.me/RobberPhex