On 06/02/17 12:10, Robert Lu wrote: > I meet this bug: https://bugzilla.redhat.com/show_bug.cgi?id=1445817 > <https://bugzilla.redhat.com/show_bug.cgi?id=1445817> > > When I run dnf upgrade, it faild: > > Cannot download 'https://codecs.fedoraproject.org/openh264/26/x86_64/ > <https://codecs.fedoraproject.org/openh264/26/x86_64/>': repomd.xml > GPG signature verification error: Bad GPG signature. > Error: Failed to synchronize cache for repo 'fedora-cisco-openh264' > > So, I tried to verify repomd.xml manually, the result is: > > $gpg --list-keys > $gpg --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-26-x86_64 > gpg: key 64DAB85D: public key "Fedora 26 Primary (26) > <fedora-26-primary@xxxxxxxxxxxxxxxxx > <mailto:fedora-26-primary@xxxxxxxxxxxxxxxxx>>" imported > gpg: Total number processed: 1 > gpg: imported: 1 (RSA: 1) > $gpg --list-keys > /home/rlu/.gnupg/pubring.gpg > ---------------------------- > pub 4096R/64DAB85D 2016-09-09 > uid Fedora 26 Primary (26) > <fedora-26-primary@xxxxxxxxxxxxxxxxx > <mailto:fedora-26-primary@xxxxxxxxxxxxxxxxx>> > > $gpg --verify repomd.xml.asc repomd.xml > gpg: Signature made Sat 25 Mar 2017 02:41:50 AM CST using RSA key ID > 64DAB85D > gpg: Good signature from "Fedora 26 Primary (26) > <fedora-26-primary@xxxxxxxxxxxxxxxxx > <mailto:fedora-26-primary@xxxxxxxxxxxxxxxxx>>" > gpg: WARNING: This key is not certified with a trusted signature! > gpg: There is no indication that the signature belongs to the > owner. > Primary key fingerprint: E641 850B 77DF 4353 78D1 D7E2 812A 6B4B 64DA > B85D > > I think this is a success result. > But why dnf is failed? Could it be because you're importing the key into your personal keyring? What does rpm -q gpg-pubkey --qf '%{name}-%{version}-%{release} --> %{summary}\n' | grep -i 64DAB85D return? FYI.... [root@localhost ~]# rpm -q gpg-pubkey --qf '%{name}-%{version}-%{release} --> %{summary}\n' | grep -i 64DAB85D gpg-pubkey-64dab85d-57d33e22 --> gpg(Fedora 26 Primary (26) <fedora-26-primary@xxxxxxxxxxxxxxxxx>) [root@localhost ~]# dnf config-manager --set-enabled fedora-cisco-openh264 [root@localhost ~]# dnf install gstreamer1-plugin-openh264 mozilla-openh264 Fedora 26 openh264 (From Cisco) - x86_64 4.5 kB/s | 2.8 kB 00:00 Fedora 26 - x86_64 - Test Updates 2.0 MB/s | 22 MB 00:11 Fedora 26 - x86_64 - Updates 2.3 kB/s | 257 B 00:00 Last metadata expiration check: 0:00:00 ago on Fri Jun 02 13:31:51 2017 CST. Dependencies resolved. =================================================================================== Package Arch Version Repository Size =================================================================================== Installing: gstreamer1-plugin-openh264 x86_64 1.10.4-1.fc26 fedora-cisco-openh264 19 k mozilla-openh264 x86_64 1.6.0-5.fc26 fedora-cisco-openh264 364 k Installing dependencies: openh264 x86_64 1.6.0-5.fc26 fedora-cisco-openh264 359 k Transaction Summary =================================================================================== Install 3 Packages Total download size: 743 k Installed size: 2.0 M Is this ok [y/N]: y Downloading Packages: (1/3): gstreamer1-plugin-openh264-1.10.4-1.fc26.x8 12 kB/s | 19 kB 00:01 (2/3): openh264-1.6.0-5.fc26.x86_64.rpm 172 kB/s | 359 kB 00:02 (3/3): mozilla-openh264-1.6.0-5.fc26.x86_64.rpm 170 kB/s | 364 kB 00:02 ----------------------------------------------------------------------------------- Total 347 kB/s | 743 kB 00:02 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : openh264-1.6.0-5.fc26.x86_64 1/3 Running scriptlet: openh264-1.6.0-5.fc26.x86_64 1/3 Installing : mozilla-openh264-1.6.0-5.fc26.x86_64 2/3 Installing : gstreamer1-plugin-openh264-1.10.4-1.fc26.x86_64 3/3 Verifying : mozilla-openh264-1.6.0-5.fc26.x86_64 1/3 Verifying : gstreamer1-plugin-openh264-1.10.4-1.fc26.x86_64 2/3 Verifying : openh264-1.6.0-5.fc26.x86_64 3/3 Installed: gstreamer1-plugin-openh264.x86_64 1.10.4-1.fc26 mozilla-openh264.x86_64 1.6.0-5.fc26 openh264.x86_64 1.6.0-5.fc26 Complete! -- Fedora Users List - The place to go to speculate endlessly _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx