RPM4 cannot validate GPG signature of RPM3 packages (eg. VMware repository)
Issue
-
rpm -K and up2date fail stating the GPG signature is not valid.
-
Re-signing the packages with antoher GPG key does not solve the problem; there appears to be multiple signatures on the packages and only one is updated with a "rpm --resign". The package still fails to validate after resigning.
- This issue is frequently encountered with the VMware repository, whether when importing vmware-tools RPMs from http://packages.vmware.com/tools/ in a Satellite channel or installing them.
Environment
-
Red Hat Enterprise Linux (RHEL) 4
-
RPM4 or later
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.