[lug] Fedora Extra Repos...GPG Keys

[Vishal Verma]

Keys are out of band of the repo data itself, and this is why typically,
repos tend to be enabled by installins an rpm that does two things: sets up
/etc/yum.repos.d/ and also installs the key in /etc/pki/rpm-gpg

For mysql, this initial 'installer' rpm can be found at:
https://repo.mysql.com/

e.g. https://repo.mysql.com/mysql80-community-release-fc30.rpm

If you inspect this rpm, you will find the files in /etc/pki

On Fri, May 24, 2019 at 2:14 PM D. Stimits <stimits at comcast.net> wrote:

> Ok, sorry about that...I actually found the key. Even so, I am wondering
> if the key is built in to the repo.xml?
>
> On May 24, 2019 at 2:06 PM "D. Stimits" <stimits at comcast.net> wrote:
>
> Hi,
>
>
> I'm trying to add a repo for Fedora (MySQL community) with the following
> "/etc/yum.repos.d/mysql-community.repo":
>
> [mysql80-community]
> name=MySQL 8.0 Community Server
> baseurl=
> http://repo.mysql.com/yum/mysql-8.0-community/fc/$releasever/$basearch/
> enabled=1
> gpgcheck=1
> gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql
>
>
> Unfortunately this results in a missing key and refusal to use the repo.
> Now I know I could probably just change "gpgcheck" to "0", but what I'd
> really like to do is add the correct key. I've been searching around, and
> cannot find the specific file to download to for "RPM-GPG-KEY-mysql". So I
> was thinking that perhaps the actual repo XML file might contain this.
> Example:
>
>
> http://repo.mysql.com/yum/mysql-8.0-community/fc/27/x86_64/repodata/repomd.xml
>
>
> Is there a way to extract a key out of this under Fedora 27 or newer (the
> example is F27)? Is there some methodology to search for keys when a google
> search leads to insanity? Or should I just bite the bullet and set gpgcheck
> to "0"?
>
>
> Thanks!
>
>
>
>
> _______________________________________________
> Web Page: http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: irc.hackingsociety.org port=6667 channel=#hackingsociety
>
>
>
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: irc.hackingsociety.org port=6667 channel=#hackingsociety
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lug.boulder.co.us/pipermail/lug/attachments/20190524/e6df8872/attachment.html>