Problem Description
---------------------------------------------------
Unable to install Ksplice on Oracle Linux 10 due to GPG key validation failure. The current RPM-GPG-KEY-ksplice uses deprecated DSA 1024-bit encryption from 2009, which is rejected by modern RPM/GPG implementations in OL 10.
When attempting to install Ksplice using the standard installation command:
sh ./install-uptrack rrc5ea7a58b93783d6c37da4901e429b8088d5a7923584234 --autoinstall
The installation fails during GPG key import with the following error:
błąd: Certificate 26D62AD516C083CD:
Policy rejects 26D62AD516C083CD: No binding signature at time 2025-09-16T16:07:04Z
błąd: /etc/pki/rpm-gpg/RPM-GPG-KEY-ksplice: zaimportowanie klucza 1 się nie powiodło.
Investigation shows that the current Ksplice GPG key has the following characteristics:
Key Type: DSA 1024-bit (considered cryptographically weak)
Creation Date: 2009-03-05
Key ID: 9BFA77D20D1F602D48A9F8B826D62AD516C083CD
File Classification: "PGP public key block Public-Key (old)"
Environment Details :
Operating System: Oracle Linux 10
Architecture: x86_64
Ksplice Key Source: https://ksplice.oracle.com/yum/RPM-GPG-KEY-ksplice
Business Impact
Unable to deploy Ksplice on Oracle Linux 10 systems
Security updates cannot be applied without kernel reboots
Affects compliance with security policies requiring live patching