Invalid GPG Key for yum repositories on Centos6

Description

After using the repositories from http://yum.opennms.org/ (as recommended on http://www.opennms.org/wiki/Installation:Yum) the following error is encountered at installation:

warning: rpmts_HdrFromFdno: Header V3 DSA/SHA1 Signature, key ID 5b9efd43: NOKEY
Retrieving key from file:///etc/yum.repos.d/OPENNMS-GPG-KEY

Invalid GPG Key from file:///etc/yum.repos.d/OPENNMS-GPG-KEY: first PGP packet should be a public-key packet, not signature packet

Suggested solution is to import key from "http://yum.opennms.org/OPENNMS-GPG-KEY" (which works).

This (as the original method anyway) defeats the purpose of having packages signed because there is no way to download securely the key.

Besides fixing the included file please also provide the key mentioned above at a secure location to allow a (more) secure installation.

Environment

CentOS 6

Acceptance / Success Criteria

None

Lucidchart Diagrams

Activity

Show:

Seth Leger February 17, 2016 at 4:09 PM

This appears to be a bug in the version of yum that is included in RHEL 6:

https://bugs.centos.org/view.php?id=8226

As of January 2016, the OpenNMS yum server is available over HTTPS so you can now fetch the GPG public key in a secure manner. Marking as fixed since this is an acceptable workaround.

https://yum.opennms.org/

Fixed

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Priority

PagerDuty

Created September 22, 2015 at 5:42 AM
Updated June 19, 2018 at 8:15 AM
Resolved February 17, 2016 at 4:09 PM