Thread: BUG #18269: RPM key descrepency

BUG #18269: RPM key descrepency

From
PG Bug reporting form
Date:
The following bug has been logged on the website:

Bug reference:      18269
Logged by:          Dale Wellman
Email address:      dwellman@intellisurvey.com
PostgreSQL version: 15.5
Operating system:   AlmaLinux 9
Description:

I understand, per
https://yum.postgresql.org/news/pgdg-rpm-repo-gpg-key-update, the RPM
repository GPG key has been updated.  The updated key can be found within
the repo RPM.  For example, installing
https://download.postgresql.org/pub/repos/yum/reporpms/EL-9-x86_64/pgdg-redhat-repo-latest.noarch.rpm
does provide valid DNF repo file and corresponding GPG key.

However, I am unable to find the GPG key within the referenced RPM file
anywhere on https://download.postgresql.org.  All the keys published on the
download site do not seem to be valid any longer.  Will the updated key be
published anywhere?

Thanks,


Re: BUG #18269: RPM key descrepency

From
Dale Wellman
Date:
My apologies.  I found the new key in question on the download site in 
the appropriately named directory, "pub/repos/yum/keys/". Please 
disregard this bug report.

-Dale

On 1/3/24 11:46 AM, PG Bug reporting form wrote:
> The following bug has been logged on the website:
>
> Bug reference:      18269
> Logged by:          Dale Wellman
> Email address:      dwellman@intellisurvey.com
> PostgreSQL version: 15.5
> Operating system:   AlmaLinux 9
> Description:
>
> I understand, per
> https://yum.postgresql.org/news/pgdg-rpm-repo-gpg-key-update, the RPM
> repository GPG key has been updated.  The updated key can be found within
> the repo RPM.  For example, installing
> https://download.postgresql.org/pub/repos/yum/reporpms/EL-9-x86_64/pgdg-redhat-repo-latest.noarch.rpm
> does provide valid DNF repo file and corresponding GPG key.
>
> However, I am unable to find the GPG key within the referenced RPM file
> anywhere on https://download.postgresql.org.  All the keys published on the
> download site do not seem to be valid any longer.  Will the updated key be
> published anywhere?
>
> Thanks,
>



Re: BUG #18269: RPM key descrepency

From
Devrim Gündüz
Date:
Hi,

 On Wed, 2024-01-03 at 19:46 +0000, PG Bug reporting form wrote:
>
> Bug reference:      18269
> Logged by:          Dale Wellman
> Email address:      dwellman@intellisurvey.com
> PostgreSQL version: 15.5
> Operating system:   AlmaLinux 9
> Description:       
>
> I understand, per
> https://yum.postgresql.org/news/pgdg-rpm-repo-gpg-key-update, the RPM
> repository GPG key has been updated.  The updated key can be found
> within the repo RPM.  For example, installing
> https://download.postgresql.org/pub/repos/yum/reporpms/EL-9-x86_64/pgdg-redhat-repo-latest.noarch.rpm
> does provide valid DNF repo file and corresponding GPG key.
>
> However, I am unable to find the GPG key within the referenced RPM
> file anywhere on https://download.postgresql.org.  All the keys
> published on the download site do not seem to be valid any longer. 
> Will the updated key be published anywhere?

You can find them under:

https://download.postgresql.org/pub/repos/yum/keys/

Regards,
--
Devrim Gündüz
Open Source Solution Architect, PostgreSQL Major Contributor
Twitter: @DevrimGunduz , @DevrimGunduzTR