Opened 11 months ago

Last modified 10 months ago

#2526 new defect

wrong gpg key for nginx-stable repo

Reported by: nadkamo@… Owned by:
Priority: minor Milestone:
Component: documentation Version: 1.25.x
Keywords: Cc:
uname -a:
nginx -V: non-applicable

Description

Hi

gpg key is invalid for nginx stable repo. It works only for nginx-mainline.
/docu/http://nginx.org/en/linux_packages.html#SLES

uname -a
Linux nginx02 5.3.18-150300.59.115-default #1 SMP Fri Mar 10 07:48:20 UTC 2023 (0398b56) x86_64 x86_64 x86_64 GNU/Linux

xxx:/home/ccloud # zypper addrepo --gpgcheck --type yum --refresh --check \
>     'http://nginx.org/packages/mainline/sles/$releasever_major' nginx-mainline
Warning: Legacy commandline option --type detected. This option is ignored.
Adding repository 'nginx-mainline' ...............................................................................................................................................[done]Repository 'nginx-mainline' successfully added

URI         : http://nginx.org/packages/mainline/sles/15
Enabled     : Yes
GPG Check   : Yes
Autorefresh : Yes
Priority    : 99 (default priority)

Repository priorities in effect:                                                                                                                        (See 'zypper lr -P' for details)
      98 (raised priority)  :  1 repository
      99 (default priority) : 24 repositories
xxx:/home/ccloud # curl -o /tmp/nginx_signing.key https://nginx.org/keys/nginx_signing.key
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  1561  100  1561    0     0   8672      0 --:--:-- --:--:-- --:--:--  8672



xxx:/home/ccloud # **gpg --with-fingerprint** /tmp/nginx_signing.key
**gpg: WARNING: no command supplied.  Trying to guess what you mean ...**
pub   rsa2048 2011-08-19 [SC] [expires: 2024-06-14]
uid           nginx signing key <signing-key@nginx.com>
xxx:/home/ccloud #

Change History (3)

comment:1 by thresh, 10 months ago

nginx -V: modified (diff)

Hello!

Can you please elaborate on what is different between stable and mainline as the information provided does not specify it?

It also seems that on SLES 15 the GPG2 command does not provide useful output to make a decision whether the key is the correct one - I'll need to change the documentation to fix that.

comment:2 by nadkamo@…, 10 months ago

Hi,

I am following ur docu: http://nginx.org/en/linux_packages.html part SLES, I choose nginx-stable repo as it is written there, then i want to chech key as it is written there and ouput u see above.

thanks

comment:3 by nadkamo@…, 10 months ago

anyway thanks for help, i thought this was root cause of my issue, i was wrong :)

Note: See TracTickets for help on using tickets.