From unknown Wed Apr 15 15:53:38 2026
X-Loop: owner@bugs.x2go.org
Subject: Bug#1111: Package: x2goserver Version: 4.0.1.19-0 SLES 11.3 - x2go-extras - pwgen-2.06-90.3 - Header V4 RSA/SHA1 signature: BAD, key ID
Reply-To: Mihai Moldovan <ionic@ionic.de>, 1111@bugs.x2go.org
Resent-From: Mihai Moldovan <ionic@ionic.de>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: x2go-project@lists.x2go.org
X-Loop: owner@bugs.x2go.org
Resent-Date: Wed, 07 Dec 2016 18:50:01 +0000
Resent-Message-ID: <handler.1111.B1111.148113640520758@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: followup 1111
X-X2Go-PR-Package: packages.x2go.org
X-X2Go-PR-Keywords: moreinfo
Received: via spool by 1111-submit@bugs.x2go.org id=B1111.148113640520758
          (code B ref 1111); Wed, 07 Dec 2016 18:50:01 +0000
Received: (at 1111) by bugs.x2go.org; 7 Dec 2016 18:46:45 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-2.0 required=3.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham
	version=3.3.2
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id B97093CC49
	for <1111@bugs.x2go.org>; Wed,  7 Dec 2016 19:46:42 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id lOtTdNK3bFoI for <1111@bugs.x2go.org>;
	Wed,  7 Dec 2016 19:46:35 +0100 (CET)
Received: from Root24.de (powered.by.root24.eu [5.135.3.88])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 58EFF3CC48
	for <1111@bugs.x2go.org>; Wed,  7 Dec 2016 19:46:34 +0100 (CET)
Received: from nopileos.local (178.162.222.41.adsl.inet-telecom.org [178.162.222.41])
	by mail.ionic.de (Postfix) with ESMTPSA id 688144F00643;
	Wed,  7 Dec 2016 19:46:33 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ionic.de; s=default;
	t=1481136393; bh=NVH3m2YHGrbEXk6b6sFtryljUCJVE+aHxmRLKBoxzOI=;
	h=Subject:To:References:From:Cc:Date:In-Reply-To:From;
	b=OSuvHb9KVnWgRRLS/GM9luoZ6WOgcf5dIEf/Mn/5LGe3VqP01+yPsKPUBuhm1QCoy
	 KhhYcjCC5cVlBrj02Ph38RXZgZZh/qwuXQXWczoF5JAE1hnK4KQW9502kXp87sGB1m
	 VAr/pZrHeIJqCzwRQuJAvEhf+Vp/JXsO/4RUWft8=
To: Olaf Matthaei <o.matthaei@narz-avn.de>
References: <E540CFAC9AA846EF8178A42802FE945C@VMXPMATTHAEI>
From: Mihai Moldovan <ionic@ionic.de>
Cc: 1111@bugs.x2go.org
Message-ID: <f9a0bcdf-844c-679e-a245-24dbecb93032@ionic.de>
Date: Wed, 7 Dec 2016 19:46:21 +0100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:45.0)
 Gecko/20100101 Thunderbird/45.5.0
MIME-Version: 1.0
In-Reply-To: <E540CFAC9AA846EF8178A42802FE945C@VMXPMATTHAEI>
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="1aaHUwgRi4CH5waDU1WeB8jfQl2kFK7GT"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--1aaHUwgRi4CH5waDU1WeB8jfQl2kFK7GT
Content-Type: multipart/mixed; boundary="TIDlEDvUkfsWjCa9VcpeBAAs510ODrtWI";
 protected-headers="v1"
From: Mihai Moldovan <ionic@ionic.de>
To: Olaf Matthaei <o.matthaei@narz-avn.de>
Cc: 1111@bugs.x2go.org
Message-ID: <f9a0bcdf-844c-679e-a245-24dbecb93032@ionic.de>
Subject: Re: Package: x2goserver Version: 4.0.1.19-0 SLES 11.3 - x2go-extras -
 pwgen-2.06-90.3 - Header V4 RSA/SHA1 signature: BAD, key ID
References: <E540CFAC9AA846EF8178A42802FE945C@VMXPMATTHAEI>
In-Reply-To: <E540CFAC9AA846EF8178A42802FE945C@VMXPMATTHAEI>

--TIDlEDvUkfsWjCa9VcpeBAAs510ODrtWI
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 07.12.2016 06:43 AM, Olaf Matthaei wrote:
> What do you mean with "this time *without* referring to the architectur=
e
> type" ? I followed the way in the wiki.

The old behavior was to have one repository for every architecture, but t=
hat's
not the "SUSE standard repository layout". Instead, SUSE uses one reposit=
ory for
all architectures.

The information in the wiki is fine and already updated. If you take a cl=
ose
look at your last email/command output, you'll notice that the repository=

previously had x86_64 in the URL while it now doesn't.


> Here are the result:
>=20
> zypper refresh
> Retrieving repository 'perl modules (SLE_11_SP3)' metadata [done]
> Building repository 'perl modules (SLE_11_SP3)' cache [done]
> File '/repodata/repomd.xml' not found on medium
> 'http://packages.x2go.org/sle/11.3/extras/x86_64'
>=20
> Abort, retry, ignore? [a/r/i/?] (a): r
> File '/repodata/repomd.xml' not found on medium
> 'http://packages.x2go.org/sle/11.3/extras/x86_64'
>=20
> Abort, retry, ignore? [a/r/i/?] (a): i
> Error retrieving metadata for 'x2go-extras':
> SKIP request: User-requested skipping of a file
> Skipping repository 'x2go-extras' because of the above error.
> File '/repodata/repomd.xml' not found on medium
> 'http://packages.x2go.org/sle/11.3/main/x86_64'
>=20
> Abort, retry, ignore? [a/r/i/?] (a): i
> Error retrieving metadata for 'x2go-release':
> SKIP request: User-requested skipping of a file
> Skipping repository 'x2go-release' because of the above error.
> Some of the repositories have not been refreshed because of an error.
>=20
> zypper repos
> # | Alias                                            | Name
> | Enabled | Refresh
> --+--------------------------------------------------+-----------------=
-----
> ----------------------------+---------+--------
> 1 | SUSE-Linux-Enterprise-Server-11-SP3 11.3.3-1.138 |
> SUSE-Linux-Enterprise-Server-11-SP3 11.3.3-1.138 | Yes     | No
> 2 | devel_languages_perl                             | perl modules
> (SLE_11_SP3)                        | Yes     | No
> 3 | x2go-extras                                      | x2go-extras
> | Yes     | No
> 4 | x2go-release                                     | x2go-release
> | Yes     | No
>=20
>=20
> zypper rr x2go-extras
> Removing repository 'x2go-extras' [done]
> Repository 'x2go-extras' has been removed.
>=20
> zypper rr x2go-release
> Removing repository 'x2go-release' [done]
> Repository 'x2go-release' has been removed.
>=20
> zypper ar http://packages.x2go.org/sle/11.3/extras x2go-extras
> Adding repository 'x2go-extras' [done]
> Repository 'x2go-extras' successfully added
> Enabled: Yes
> Autorefresh: No
> GPG check: Yes
> URI: http://packages.x2go.org/sle/11.3/extras
>=20
> zypper ar http://packages.x2go.org/sle/11.3/main x2go-release
> Adding repository 'x2go-release' [done]
> Repository 'x2go-release' successfully added
> Enabled: Yes
> Autorefresh: No
> GPG check: Yes
> URI: http://packages.x2go.org/sle/11.3/main
>=20
> zypper search x2go
> Building repository 'x2go-extras' cache [done]
> Building repository 'x2go-release' cache [done]
> Loading repository data...
> Reading installed packages...
>=20
> S | Name                   | Summary                                   =
   |
> Type
> --+------------------------+-------------------------------------------=
---+-
> ----------
>   | X2Go SLE:11:SP3 extras | X2Go extras Repository for SLE:11:SP3     =
   |
> product
>   | X2Go SLE:11:SP3 main   | X2Go main Repository for SLE:11:SP3       =
   |
> product
>   | cups-x2go              | CUPS backend for printing from X2Go       =
   |
> package
>   | cups-x2go              | CUPS backend for printing from X2Go       =
   |
> srcpackage
>   | x2goagent              | X2Go Agent                                =
   |
> package
>   | x2godesktopsharing     | Share X11 desktops with other users via X2=
Go |
> package
>   | x2godesktopsharing     | Share X11 desktops with other users via X2=
Go |
> srcpackage
>   | x2goserver             | X2Go Server                               =
   |
> package
>   | x2goserver             | X2Go Server                               =
   |
> srcpackage
>   | x2goserver-extensions  | X2Go Server (extension support)           =
   |
> package
>   | x2goserver-fmbindings  | X2Go Server (file manager bindings)       =
   |
> package
>   | x2goserver-printing    | X2Go Server (printing support)            =
   |
> package
>   | x2goserver-xsession    | X2Go Server (Xsession runner)             =
   |
> package

Okay, good!


> zypper install x2goserver
> Loading repository data...
> Reading installed packages...
> Resolving package dependencies...
>=20
> The following NEW packages are going to be installed:
>   libNX_X11-6 libNX_Xcomposite1 libNX_Xdamage1 libNX_Xdmcp6 libNX_Xext6=

> libNX_Xfixes3 libNX_Xinerama1 libNX_Xpm4 libNX_Xrandr2 libNX_Xrender1
>   libNX_Xtst6 libXcomp3 libXcompext3 libXcompshad3 nx-libs nxagent
> perl-DBD-SQLite pwgen sshfs x2goagent x2goserver x2goserver-extensions
>   x2goserver-xsession
>=20
> The following packages are not supported by their vendor:
>   libNX_X11-6 libNX_Xcomposite1 libNX_Xdamage1 libNX_Xdmcp6 libNX_Xext6=

> libNX_Xfixes3 libNX_Xinerama1 libNX_Xpm4 libNX_Xrandr2 libNX_Xrender1
>   libNX_Xtst6 libXcomp3 libXcompext3 libXcompshad3 nx-libs nxagent pwge=
n
> sshfs x2goagent x2goserver x2goserver-extensions x2goserver-xsession
>=20
> 23 new packages to install.
> Overall download size: 2.9 MiB. After the operation, additional 8.6 MiB=
 will
> be used.
> Continue? [y/n/?] (y): y
> Retrieving package pwgen-2.06-90.3.x86_64 (1/23), 19.0 KiB (39.0 KiB
> unpacked)
> Retrieving: pwgen-2.06-90.3.x86_64.rpm [done]
> Retrieving package sshfs-2.4-5.1.x86_64 (2/23), 43.0 KiB (89.0 KiB unpa=
cked)
> Retrieving: sshfs-2.4-5.1.x86_64.rpm [done]
> Retrieving package nx-libs-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86=
_64
> (3/23), 15.0 KiB (30.0 KiB unpacked)
> Retrieving: nx-libs-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.rpm=

> [done]
> Retrieving package libXcomp3-3.5.0.32-0.0x2go1.1.git20161129.734.main.x=
86_64
> (4/23), 338.0 KiB (1.2 MiB unpacked)
> Retrieving: libXcomp3-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.r=
pm
> [done]
> Retrieving package
> libNX_Xdmcp6-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (5/23), 12=
=2E0
> KiB (27.0 KiB unpacked)
> Retrieving: libNX_Xdmcp6-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_6=
4.rpm
> [done]
> Retrieving package
> libNX_X11-6-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (6/23), 516=
=2E0
> KiB (1.2 MiB unpacked)
> Retrieving: libNX_X11-6-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64=
=2Erpm
> [done]
> Retrieving package
> libXcompext3-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (7/23), 35=
=2E0
> KiB (93.0 KiB unpacked)
> Retrieving: libXcompext3-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_6=
4.rpm
> [done]
> Retrieving package
> libNX_Xext6-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (8/23), 28.=
0 KiB
> (85.0 KiB unpacked)
> Retrieving: libNX_Xext6-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64=
=2Erpm
> [done]
> Retrieving package
> libNX_Xtst6-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (9/23), 13.=
0 KiB
> (32.0 KiB unpacked)
> Retrieving: libNX_Xtst6-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64=
=2Erpm
> [done]
> Retrieving package
> libNX_Xrender1-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (10/23),=
 20.0
> KiB (49.0 KiB unpacked)
> Retrieving:
> libNX_Xrender1-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.rpm [don=
e]
> Retrieving package
> libNX_Xpm4-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (11/23), 35.=
0 KiB
> (80.0 KiB unpacked)
> Retrieving: libNX_Xpm4-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.=
rpm
> [done]
> Retrieving package
> libNX_Xinerama1-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (12/23)=
, 8.0
> KiB (14.0 KiB unpacked)
> Retrieving:
> libNX_Xinerama1-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.rpm [do=
ne]
> Retrieving package
> libNX_Xfixes3-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (13/23), =
11.0
> KiB (27.0 KiB unpacked)
> Retrieving:
> libNX_Xfixes3-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.rpm [done=
]
> Retrieving package
> libNX_Xdamage1-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (14/23),=
 8.0
> KiB (13.0 KiB unpacked)
> Retrieving:
> libNX_Xdamage1-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.rpm [don=
e]
> Retrieving package
> libNX_Xrandr2-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (15/23), =
10.0
> KiB (18.0 KiB unpacked)
> Retrieving:
> libNX_Xrandr2-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.rpm [done=
]
> Retrieving package
> libNX_Xcomposite1-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (16/2=
3),
> 8.0 KiB (13.0 KiB unpacked)
> Retrieving:
> libNX_Xcomposite1-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.rpm [=
done]
> Retrieving package
> libXcompshad3-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64 (17/23), =
34.0
> KiB (91.0 KiB unpacked)
> Retrieving:
> libXcompshad3-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.rpm [done=
]
> Retrieving package nxagent-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86=
_64
> (18/23), 1.6 MiB (5.0 MiB unpacked)
> Retrieving: nxagent-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.rpm=

> [done (555.0 KiB/s)]
> Retrieving package x2goagent-3.5.0.32-0.0x2go1.1.git20161129.734.main.x=
86_64
> (19/23), 12.0 KiB (37.0 KiB unpacked)
> Retrieving: x2goagent-3.5.0.32-0.0x2go1.1.git20161129.734.main.x86_64.r=
pm
> [done]
> Retrieving package
> x2goserver-xsession-4.0.1.20-0.0x2go1.1.git20161129.1125.main.x86_64
> (20/23), 29.0 KiB (83.0 KiB unpacked)
> Retrieving:
> x2goserver-xsession-4.0.1.20-0.0x2go1.1.git20161129.1125.main.x86_64.rp=
m
> [done]
> Retrieving package
> x2goserver-extensions-4.0.1.20-0.0x2go1.1.git20161129.1125.main.x86_64
> (21/23), 30.0 KiB (79.0 KiB unpacked)
> Retrieving:
> x2goserver-extensions-4.0.1.20-0.0x2go1.1.git20161129.1125.main.x86_64.=
rpm
> [done]
> Retrieving package
> x2goserver-4.0.1.20-0.0x2go1.1.git20161129.1125.main.x86_64 (22/23), 89=
=2E0
> KiB (314.0 KiB unpacked)
> Retrieving: x2goserver-4.0.1.20-0.0x2go1.1.git20161129.1125.main.x86_64=
=2Erpm
> [done]
> Installing: perl-DBD-SQLite-1.14-11.14 [done]
> Installing: pwgen-2.06-90.3 [error]
> Installation of pwgen-2.06-90.3 failed:
> (with --nodeps --force) Error: Subprocess failed. Error: RPM failed: er=
ror:
> /var/cache/zypp/packages/x2go-extras/x86_64/pwgen-2.06-90.3.x86_64.rpm:=

> Header V4 RSA/SHA1 signature: BAD, key ID 9c6b0b2b
> error:
> /var/cache/zypp/packages/x2go-extras/x86_64/pwgen-2.06-90.3.x86_64.rpm
> cannot be installed
>=20
>=20
> Abort, retry, ignore? [a/r/i] (a):

The key is not the problem, you obviously have it in your RPM DB already,=
 as
otherwise rpm would have given you a "NOKEY" error.

Checking via "rpm -v --checksign" on the build server reveals:

pwgen-2.06-90.3.x86_64.rpm:
    Header V4 RSA/SHA1 Signature, key ID 9c6b0b2b: OK
    Header SHA1 digest: OK (693079e6da9cde1e9e5418c8a90d47ca4b89cf3a)
    V4 RSA/SHA1 Signature, key ID 9c6b0b2b: OK
    MD5 digest: OK (c680b2bf2f22c0f8e4e29a81efb326dc)

I suspect (also from other resources I found on the net), that SLE 11.3 d=
oes not
support V4 signatures, though.

I have thus resigned only the pwgen package for now. Can you please retry=

installing x2goserver? It will definitely fail at some package again, but=
 I want
to see if pwgen now looks clean to your rpm binary (i.e., if it doesn't c=
omplain
about it any longer.) If switching to V3 signatures with the SHA256 hash
algorithm, I'll resign all packages on 11.3 and 11.2.


Side note: please remember to include 1111@bugs.x2go.org when you're repl=
ying,
so that your answer makes it into the bugreport.



Mihai


--TIDlEDvUkfsWjCa9VcpeBAAs510ODrtWI--

--1aaHUwgRi4CH5waDU1WeB8jfQl2kFK7GT
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=iNSV
-----END PGP SIGNATURE-----

--1aaHUwgRi4CH5waDU1WeB8jfQl2kFK7GT--
