rpm -Va BAD, key ID

[Jeffrey Johnson]

On Jan 13, 2015, at 11:30 AM, Elan Ruusamäe wrote:

> rpm -Va emits such messages:
> 
>  error: rpmdb (h#123): Header V4 DSA signature: BAD, key ID e4f1bc2d
> 

What package is header #123? (try rpm -Vavv which should display package names near h#123).

> that's from repeated scratch installs, the key ID stays always the same (e4f1bc2d)
> 
> 
> i've traced that something between rpm-5.4.14-5.x86_64 and rpm-5.4.15-6.x86_64 and have caused it
> 

rpm-5.4.14 may not attempt to verify header signatures while verifying, I forget when enabled.

Removing and re-importing 0xe4f1bc2d is the 1st thing to try.

You can easily patch out the attempt to verify header signatures in 5.4.15.

Meanwhile more info is needed if you want a fix, including what public key (0xe4f1bc2d) is being used,
and whether the public key is imported or included in packages.

73 de Jeff