Opened 10 months ago

Last modified 9 months ago

#2526 new defect

wrong gpg key for nginx-stable repo — at Version 1

Reported by: nadkamo@… Owned by:
Priority: minor Milestone:
Component: documentation Version: 1.25.x
Keywords: Cc:
uname -a:
nginx -V: non-applicable

Description

Hi

gpg key is invalid for nginx stable repo. It works only for nginx-mainline.
/docu/http://nginx.org/en/linux_packages.html#SLES

uname -a
Linux nginx02 5.3.18-150300.59.115-default #1 SMP Fri Mar 10 07:48:20 UTC 2023 (0398b56) x86_64 x86_64 x86_64 GNU/Linux

xxx:/home/ccloud # zypper addrepo --gpgcheck --type yum --refresh --check \
>     'http://nginx.org/packages/mainline/sles/$releasever_major' nginx-mainline
Warning: Legacy commandline option --type detected. This option is ignored.
Adding repository 'nginx-mainline' ...............................................................................................................................................[done]Repository 'nginx-mainline' successfully added

URI         : http://nginx.org/packages/mainline/sles/15
Enabled     : Yes
GPG Check   : Yes
Autorefresh : Yes
Priority    : 99 (default priority)

Repository priorities in effect:                                                                                                                        (See 'zypper lr -P' for details)
      98 (raised priority)  :  1 repository
      99 (default priority) : 24 repositories
xxx:/home/ccloud # curl -o /tmp/nginx_signing.key https://nginx.org/keys/nginx_signing.key
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  1561  100  1561    0     0   8672      0 --:--:-- --:--:-- --:--:--  8672



xxx:/home/ccloud # **gpg --with-fingerprint** /tmp/nginx_signing.key
**gpg: WARNING: no command supplied.  Trying to guess what you mean ...**
pub   rsa2048 2011-08-19 [SC] [expires: 2024-06-14]
uid           nginx signing key <signing-key@nginx.com>
xxx:/home/ccloud #

Change History (1)

comment:1 by thresh, 10 months ago

nginx -V: modified (diff)

Hello!

Can you please elaborate on what is different between stable and mainline as the information provided does not specify it?

It also seems that on SLES 15 the GPG2 command does not provide useful output to make a decision whether the key is the correct one - I'll need to change the documentation to fix that.

Note: See TracTickets for help on using tickets.