MySQL Bugs: #1792: bad signature: MySQL-shared-compat-4.1.0-0.i386.rpm

Bug #1792	bad signature: MySQL-shared-compat-4.1.0-0.i386.rpm
Submitted:	10 Nov 2003 2:42	Modified:	17 Nov 2003 1:48
Reporter:	Greg Rossel	Email Updates:
Status:	Closed	Impact on me:	None
Category:	MySQL Server: Installing	Severity:	S1 (Critical)
Version:	4.1	OS:	Linux (Mandrake 9.1)
Assigned to:		CPU Architecture:	Any

Description:
The following message occurs when installing the rpm: 
 
The following packages have bad signatures: 
../mysql/MySQL-shared-compat-4.1.0-0.i386.rpm 
 
Do you want to continue installation ?  
 
I have tried downloading the rpm from 3 different sites and all give the same 
error message. I am using Mandrake 9.1 on a pc. 
 
Thanks. 

How to repeat:
Click on MySQL-shared-compat-4.1.0-0.i386.rpm to get message.

When Ignoring the bad signiature error a 'conflicts detected' dialog shows the 
following info:  
 
libcrypto.so.0.9.6 is needed by MySQL-shared-compat-4.1.0-0 
libssl.so.0.9.6 is needed by MySQL-shared-compat-4.1.0-0 
Install aborted

Thank you for your bug report. This issue has been committed to our
source repository of that product and will be incorporated into the
next release.

If necessary, you can access the source repository and build the latest
available version, including the bugfix, yourself. More information 
about accessing the source trees is available at
    http://www.mysql.com/doc/en/Installing_source_tree.html

$ rpm --checksig MySQL-shared-compat-4.1.0-0.i386.rpm
MySQL-shared-compat-4.1.0-0.i386.rpm: md5 (GPG) NOT OK (MISSING KEYS: GPG#5072e1f5)

This is known problem with this RPM only.

Dependancies issue is normal for every RPM. After all this is one of biggest strengths of this packaging technology.

It seems like there are two different issues to look at here. 
 
a) RPM complains that the 4.1.0-shared-compat RPM has a bad signature: I just 
verified the signatures from our local staging server and on our primary 
mirror (sunsite.dk) - both looked correct. Are you sure you have actually 
imported the required public GPG key for build@mysql.com? This is required for 
RPM to be able to verify the signature (see http://www.mysql.com/doc/en/
Verifying_Package_Integrity.html for details) 
b) RPM complains about missing dependencies (libssl.so.0.9.6): That's due to 
the fact that the mysqlclient shared library included in this package was 
built on a system with this specific version of OpenSSL. In this case you may 
either have to install this specific version of the OpenSSL library, or you 
have to recompile the MySQL 4.1.0 source RPM. Are you sure you need 
MySQL-shared-compat on Mandrake Linux at all? AFAIK MDK keeps the MySQL shared 
libs in a separate package, too. So you could simply keep this package 
installed to satisfy the library dependencies for the other installed 
applications.