Bug 1100626 - project openSUSE:Tools has invalid DSA1024 key
Summary: project openSUSE:Tools has invalid DSA1024 key
Status: NEW
Alias: None
Product: openSUSE.org
Classification: openSUSE
Component: BuildService (show other bugs)
Version: unspecified
Hardware: Other Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: Adrian Schröter
QA Contact: Adrian Schröter
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-07-09 16:16 UTC by Juergen Weigert
Modified: 2018-07-12 18:29 UTC (History)
0 users

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Juergen Weigert 2018-07-09 16:16:15 UTC 
wget  -nv https://download.opensuse.org/repositories/openSUSE:Tools/xUbuntu_18.04/Release.key -O - | gpg -

2018-07-09 18:05:21 URL:https://download.opensuse.org/repositories/openSUSE:/Tools/xUbuntu_18.04/Release.key [1011/1011] -> "-" [1]
pub   dsa1024 2008-01-22 [SC] [verfällt: 2019-04-18]
      0A031153E2F5E9DB71510D8C85753AA5EEFEFDE9
uid           openSUSE:Tools OBS Project <openSUSE:Tools@build.opensuse.org

When imported with apt-key add, a modern ubuntu 18.04 rejects the the repo then:

 W: GPG error: http://download.opensuse.org/repositories/openSUSE:/Tools/xUbuntu_18.04  Release: The following signatures were invalid: 0A031153E2F5E9DB71510D8C85753AA5EEFEFDE9
E: The repository 'http://download.opensuse.org/repositories/openSUSE:/Tools/xUbuntu_18.04  Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.


Thus the procedure advertised at https://software.opensuse.org//download.html?project=openSUSE%3ATools&package=build
does not work.

Please upgrade to an rsa key or provide a workaround.