Skip to content

change crypto library from openssl to libgcrypt

chantra requested to merge chantra/rpm:fix_sig_key_import into c9s

openssl on c9s does not support RPM-GPG-KEY-CentOS-SIG-Extras. When trying to import the key, it fails with:

error: /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Extras: key 1 import
failed.

verbose output does not provide much more infomation. When using libgcrypt, the issue does not reproduce. I suspect this is an issue with an algorithm not supported by c9s openssl version.

Dump of both keys:

After compiling with libgcrypt, the key is successfully imported.

Resolves: rhbz#2059424

Signed-off-by: Manu Bretelle chantr4@gmail.com

Edited by chantra

Merge request reports