{"id":3152,"date":"2023-08-01T14:15:22","date_gmt":"2023-08-01T21:15:22","guid":{"rendered":"https:\/\/rglinuxtech.com\/?p=3152"},"modified":"2023-08-01T14:15:22","modified_gmt":"2023-08-01T21:15:22","slug":"webmin-sha1-confusion-a-solution","status":"publish","type":"post","link":"https:\/\/rglinuxtech.com\/?p=3152","title":{"rendered":"Webmin – SHA1 Confusion – A Solution.."},"content":{"rendered":"

I have been using Webmin<\/strong> for at least the past 20+ years (!) and ran up against the SHA1 error on the Webmin RPMs when upgrading to Fedora 38, which did not permit it to be added\/updated any more..<\/p>\n

# rpm -q webmin<\/span><\/strong>
\nerror: Verifying a signature using certificate XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX (Jamie Cameron <jcameron@webmin.com>):<\/strong><\/span>
\nKey XXXXXXXXXXXXXXXXXXX invalid: not signing capable<\/strong><\/span>
\nerror: rpmdbNextIterator: skipping h# 9083<\/strong><\/span>
\nHeader V4 DSA\/SHA1 Signature, key ID XXXXXXXX: BAD<\/strong><\/span>
\nHeader SHA1 digest: OK<\/strong><\/span>
\npackage webmin is not installed<\/strong><\/span><\/code><\/p>\n

There were several posts that insisted that the problem was ‘solved’, but I still kept getting the same error..\u00a0\u00a0 After more research, it turned out that this was because the old\/bad SHA1 key was still in the system, and needed to be removed, and also the old\/bad SHA1 repo was still in existence..<\/p>\n

To find\/erase the old\/bad key:<\/p>\n

# rpm -q gpg-pubkey --qf \u2018%{NAME}-%{VERSION}-%{RELEASE}\\t%{SUMMARY}\\n\u2019<\/strong><\/span><\/code><\/p>\n

– this will show all the keys on your system, and you need to look for the one from ‘jcameron@webmin.com’<\/p>\n

………….\u2018gpg-pubkey-11f63c51-3c7dc11dtJamie Cameron <jcameron@webmin.com> public keyn\u2019<\/span><\/strong><\/code>………..<\/p>\n

Then use the key ID to get rid of it (ignore the ‘t’ between the key and the name\/email)<\/p>\n

rpm -e gpg-pubkey-11f63c51-3c7dc11d<\/span><\/strong><\/code><\/p>\n

Then edit the repo info in \/etc\/yum.repos.d\/webmin.repo<\/span> to reference the ‘new\/good’ repo:<\/p>\n

[webmin-noarch]
\nname=Webmin - noarch
\nbaseurl=https:\/\/download.webmin.com\/download\/newkey\/yum
\nenabled=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-webmin-developers
\ngpgcheck=1<\/strong><\/span><\/code><\/p>\n

Then add the new\/good key:<\/p>\n

# wget https:\/\/download.webmin.com\/developers-key.asc
\n# rpm --import developers-key.asc<\/strong><\/span><\/code><\/p>\n

Then # dnf clean all<\/span><\/strong><\/code><\/p>\n

# rpm -q webmin <\/strong><\/span>
\nwebmin-2.100-1.noarch<\/strong><\/span><\/code><\/p>\n

Thanks to Hilario_Fochi<\/em> for the key removal details:
\nOriginal article thread:
\nhttps:\/\/forum.virtualmin.com\/t\/error-gpg-check-failed-unable-to-install-on-fedora-38\/120374\/14<\/a><\/p>\n

Robert Gadsdon.\u00a0\u00a0 August 1st 2023.<\/em><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

I have been using Webmin for at least the past 20+ years (!) and ran up against the SHA1 error on the Webmin RPMs when upgrading to Fedora 38, which did not permit it to be added\/updated any more.. # rpm -q webmin error: Verifying a signature using certificate XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX (Jamie Cameron <jcameron@webmin.com>): Key XXXXXXXXXXXXXXXXXXX invalid: not …<\/span> Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[10,1238,15,19,2593],"tags":[2595,2539,162,2596,2594,415],"class_list":["post-3152","post","type-post","status-publish","format-standard","hentry","category-fedora","category-fix","category-linux-2","category-opinion","category-webmin","tag-bad-key-removal","tag-fedora-38","tag-fixed","tag-new-repo","tag-sha1-error","tag-webmin"],"_links":{"self":[{"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/posts\/3152","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3152"}],"version-history":[{"count":4,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/posts\/3152\/revisions"}],"predecessor-version":[{"id":3156,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/posts\/3152\/revisions\/3156"}],"wp:attachment":[{"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3152"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3152"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3152"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}