| Home > FAQ > CentOS 3 Specific | FAQ |
Why does YUM complain about missing a GPG key under CentOS?
or
I just installed the latest Centos and Yum k... [CentOS 3 Specific]
or
I just installed the latest Centos and Yum k... [CentOS 3 Specific]
Requested and Answered by donavan [donavan] on 03-Mar-2005 17:15 (39062 reads)
Why does YUM complain about missing a GPG key under CentOS?
or
I just installed the latest Centos and Yum keeps reporting that the correct GPG key is not installed. How do I install it?
or
I just installed the latest Centos and Yum keeps reporting that the correct GPG key is not installed. How do I install it?
You need to install the CentOS RPM signing key. It is not installed as part of the base system install for security reasons. This provides you the opportunity to validate the key before installing it on your system.
RPM has the capacity to retrieve the key from a Centos Mirror:
rpm --import http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-3
(as root) will install ('import') the CentOS 3 package signing key for RPM to use to confirm a validly signed package.
Please note that it is safer to import the copy of the key from the install ISO media. It is in the root directory of each ISO, as RPM-GPG-KEY, and the same key is present on disc 1 as RPM-GPG-KEY-CentOS-3.
The reason this is safer is that a CD is of course an immutable media, and when one verifies ISO MD5SUMs, one is implicitly also verifying the key. As a backstop, this key is as follows:
If there is any question as to the validity of the key, please enquire; if a forged key is encountered, please send details, and return contact details to reach you to: security@centos.org
RPM has the capacity to retrieve the key from a Centos Mirror:
rpm --import http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-3
(as root) will install ('import') the CentOS 3 package signing key for RPM to use to confirm a validly signed package.
Please note that it is safer to import the copy of the key from the install ISO media. It is in the root directory of each ISO, as RPM-GPG-KEY, and the same key is present on disc 1 as RPM-GPG-KEY-CentOS-3.
The reason this is safer is that a CD is of course an immutable media, and when one verifies ISO MD5SUMs, one is implicitly also verifying the key. As a backstop, this key is as follows:
----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.2.1 (GNU/Linux)
mQGiBEBWEXMRBACwv6ybAZQEyqFvVXnVmTk5Pvt/k701xbdYFkh/GbolGKhvW0OQ
zSK0zffeBXrqJHnfWGxOjXvhQVq9miOQUtTCk65s6dZF4HbXRmgQynVAj19S0Axw
wqzVZzZAbbNz4Y5Mu/UOflR7n5WcNmES1ynFqRsmFWsypIJFrT3gGMC4gwCgmHev
ld/ebabzVqkk1JjFMoxA0DED/3OJ0IohANLmDe7eAmT8IRIlWb+HPfi2pfhYCjYv
/g1nc+0hBPaZtrvFuboaQfUh7vqcVza+Ti/A1kPsTwDiXClV/njzow04Qx9K2TKL
E+Jad9kd9/mJGM2JeUFvbPYFQaIBP6ZW8pibZI7YKGQ1Rwmv6wCjlQ06ABHetIgV
5sOcA/sHFomRwY+aTGxM4Bd0XUZW0Hjj2FP5/38yfWflhDLGSDeJPuwMk+Y5JlTz
FfMMeNsMMdGk9Hn7vysKrQwXbZcpS+WmopA8jWg77jhHIXZKLJYdySCDlxsOixG2
NBmRS9HQHh/d8OfCEh4tg1VLKhVmkZRpWdHcmxueJfkx3zzMX7QmQ2VudE9TLTMg
S2V5IDxjZW50b3MtM2tleUBjYW9zaXR5Lm9yZz6IXwQTEQIAHwUCQFYRcwUJCWYB
gAQLBwMCAxUCAwMWAgECHgECF4AACgkQcEnkTQJeUTsPjgCdFVLLKgeMpqc8gFdm
HW9pQxtRRKoAoIYpvPOIb1nj88gpx4aYbxcw+S/5iEwEExECAAwFAkBWHykFgwll
88oACgkQKN6I1rmRG5KRxACfQOzZp6ComvGfvkPFuJRd9QvVx48AnAvY/AqekJxd
/y6TGOQvrmm8CoxWuQINBEBWEZEQCADQ48xpVDl9w3PlwgauoGaysDgyc8OAkzAM
6IPb/Ma068l73y58KJXdBLCTDFbCQb/O29wE7iw8V/MXqBRl6aWzKkdnkA2RzDHo
MqYGHrMUwO8y74l/Crw24b5gzhOkHwZGeuCEHbXyt6h1oYJBs239vyvQF/l5EIUF
CRiaYT1Y4tGdeGoCwNEdVCOBz5r9F7ebJaT0rK+cFwMEk3mLXmxYz2w9NdKS9R8w
ytIRZDCLY2XadmPKfcZje1tdp0b/z+jbXw1iIs1hbje0kLvC88OSp5Ss0oN0zN2H
NZT59mdnqlLlUpNApS1Ev6pPB5ZAvdi43IJdVDKgsp+SSwCy/85TAAMFB/92Z967
/FsFxShW+6t7ShI3Y1PF4hVyK3wDF1I83b7Ff+IwFh8YhPt2x8AWTxJRWAoIrtzh
G+zEmUjm19dRqeB3tI3zTqNSkl15IIVGElhv8PFET9UwZblHLVW4LQEqbOIeFlTn
jSnbdfh05Qzx0J+eJnMdgBhQajItE7R74O5Yx5Dqaat641FxT6cZUtRUcd+tQ58t
MkIcK1ZvRiRTC6WkwfULpiRUvG4N+NhCWlfjGUfvcoMuThqkjU3qeVS3hlH2T1Mq
JMilUUZFN5laLXv9oQFJZReF64mrQBQzueqjtkWEbVqoji1ThdPQTeLgn9SSewZf
X584+BMZSkhNBP8ViEwEGBECAAwFAkBWEZEFCQlmAYAACgkQcEnkTQJeUTsx4wCf
ZZPhJKRCXgwX7UB9YwDaSFQK8IgAoJgy+aCPMUCH6WUFPVRf49q56+9r =4XKu
-----END PGP PUBLIC KEY BLOCK-----
If there is any question as to the validity of the key, please enquire; if a forged key is encountered, please send details, and return contact details to reach you to: security@centos.org
0 Comment(s)
|
The comments are owned by the poster. We aren't responsible for their content.
|