gpg problems with shibboleth repo packages

[Robert Frost]

Hello,

We've got some problems with packages in the
https://shibboleth.net/cgi-bin/mirrorlist.cgi/CentOS_7/ repository failing
to install at the moment.

The packages are :

liblog4shib2.x86_64
libcurl-openssl.x86_64
libsaml12.x86_64
libxml-security-c20.x86_64
libxmltooling10.x86_64
opensaml-schemas.x86_64
shibboleth.x86_64
xmltooling-schemas.x86_64

and the failures reported by yum look like the following:


Failing package is: xmltooling-schemas-3.2.1-1.x86_64
 GPG Keys are configured as:
https://shibboleth.net/downloads/service-provider/RPMS/repomd.xml.key

We're using the key from
https://shibboleth.net/downloads/service-provider/RPMS/repomd.xml.key in
our repository config.

RPM complains thusly:

# rpm -K
/var/cache/yum/x86_64/7Server/shibboleth/packages/libcurl-openssl-7.80.0-1.el7.x86_64.rpm
/var/cache/yum/x86_64/7Server/shibboleth/packages/libcurl-openssl-7.80.0-1.el7.x86_64.rpm:
RSA sha1 ((MD5) PGP) md5 NOT OK (MISSING KEYS: (MD5) PGP#02277962)

Suggesting a key problem - however, I can curl the key from the URL above
without problem and can also verify it's in the keyring...

# rpm -qi gpg-pubkey-7d0a1b3d-581a293b
Name : gpg-pubkey
Version : 7d0a1b3d
Release : 581a293b
Architecture: (none)
Install Date: Tue 09 Jul 2019 11:06:00 BST
Group : Public Keys
Size : 0
License : pubkey
Signature : (none)
Source RPM : (none)
Build Date : Wed 02 Nov 2016 17:58:19 GMT
Build Host : localhost
Relocations : (not relocatable)
Packager : security:shibboleth OBS Project <
security:shibboleth at build.opensuse.org>
Summary : gpg(security:shibboleth OBS Project <
security:shibboleth at build.opensuse.org>)
Description :
----BEGIN PGP PUBLIC KEY BLOCK----
Version: rpm-4.11.3 (NSS-3)

mQGiBEholYg<snip>


Would something have happened on the repository side causing this problem
for anyone else?


Apologies if this has already been brought up.


Kind regards,


Rob.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20211208/1b964526/attachment.htm>