On Wed, 2003-02-05 at 00:52, Martin Sevior wrote:
> I downloaded 1.0.4 on a 100% clean RH 8.0 and had exactly this problem.
> Also the abiword-fonts-1.0.4 package is corrupted somehow. It won't
> install.
> rms can you look at this?
> The simple solution for getting around the signature problem is:
> rpm -ivh --nosignature abiword-*

This should never be an acceptable work around :)
If there's a signature problem, then something may be very very wrong.

> -----Forwarded Message-----
> From: Barry Skidmore <skidmore@mail.worldvenue.org>
> I am using Red Hat 8.0, and am trying to upgrade my current installation
> of AbiWord 1.0.2 using the 1.0.4 rpms for AbiWord-gnome and
> AbiWord-fonts, but am receiving the following error message(s).  I tried
> downloading abiword-fonts from two different mirrors with the same
> result:
> [root@mail downloads]# rpm -Uvh abiword-gnome-bidi-1.0.4-1.i386.rpm
> abiword-fonts-1.0.4-1.i386.rpm
> warning: abiword-gnome-bidi-1.0.4-1.i386.rpm: V3 DSA signature: NOKEY,
> key ID 7a34fade
> error: abiword-fonts-1.0.4-1.i386.rpm: V3 DSA signature: BAD, key ID
> 7a34fade
> error: abiword-fonts-1.0.4-1.i386.rpm cannot be installed

This is, happily, the expected behaviour of rpm 4.1.

If you don't have the public key with which a package was signed, then
you are trying to install what could be a trojan horse, for instance.
Of course, you'd have to trust my public key or that I got the source
from a trustworthy place.

The true way to solve this non-issue is to get my public key. I hope you
can manage a trust chain down to my key :)

You can install my key in the rpm pgp database with:
as your normal user:
0. cd /tmp
1. gpg --keyserver pgp.mit.edu --recv-key 0x7A34FADE
2. gpg -a --export 0x7A34FADE > rui.asc

then as user root:
3. su -
4. cd /tmp
5. rpm --import rui.asc

Now rpm will have my key in the rpmdb, and that message will not show
again.

Yours, Rui
-- 
+ No matter how much you do, you never do enough -- unknown
+ Whatever you do will be insignificant,
| but it is very important that you do it -- Gandhi
+ So let's do it...?

Please AVOID sending me WORD, EXCEL or POWERPOINT attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html