rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch not working on centOS stream. gives a key import error.

[ingenium21]

Elasticsearch Version

doesn't matter

Installed Plugins

none

Java Version

bundled

OS Version

5.14.0-75.el9.x86_64 #1 SMP PREEMPT Sat Mar 26 08:10:05 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

Problem Description

I am trying to install elasticsearch in a centOS stream using rpm and following elastic's own directions.
When I try to import the gpg key using rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch I get a 'key 1 import failed' error. using -v doesn't give me anything useful either.

Steps to Reproduce

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

Logs (if relevant)

No response

[elasticmachine]

Pinging @elastic/es-delivery (Team:Delivery)

[breskeby]

@ingenium21 which elasticsearch version did you try to install?

[ingenium21]

Newest version, but I couldn't even get to that part as importing the keys failed

[breskeby]

ah I see

[ingenium21]

I was able to get around it by change gpgcheck=1 to gpgcheck=0 in the elasticsearch.repo file. But yes, ideally I would like to be installing applications with a valid gpg check.

[breskeby]

Thanks again for bringing this up. I think what we see is an issue introduced by rpm-software-management/rpm#1788

[ingenium21]

No problem. Happy to support such a cool product. 👍

[cisco-abrandel]

Seeing the same issue on Alma 9, and I believe you are correct in that changes to RPM are causing this.

[nerijus]

A workaround on CentOS 9 is to run update-crypto-policies --set LEGACY.