# Opensearch Yum/RPM GPG key seems wrong?

**URL:** <https://forum.opensearch.org/t/opensearch-yum-rpm-gpg-key-seems-wrong/24308>\
**Category:** OpenSearch\
**Tags:** releases, install\
**Created:** [May 8, 2025, 7:13pm UTC](https://forum.opensearch.org/t/opensearch-yum-rpm-gpg-key-seems-wrong/24308 "2025-05-08T19:13:35Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jasonrojas](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/jasonrojas/32/4902_2.png) [@jasonrojas](https://forum.opensearch.org/u/jasonrojas)\
**Post date:** [May 8, 2025, 7:13pm UTC](https://forum.opensearch.org/t/opensearch-yum-rpm-gpg-key-seems-wrong/24308/1 "2025-05-08T19:13:35Z")

</div>

Opensearch 3.0 -

```auto
# cat /etc/yum.repos.d/opensearch-3.x.repo 
[opensearch-3.x]
name=OpenSearch 3.x
baseurl=https://artifacts.opensearch.org/releases/bundle/opensearch/3.x/yum
enabled=1
repo_gpgcheck=1
gpgcheck=1
gpgkey=https://artifacts.opensearch.org/publickeys/opensearch-release.pgp
autorefresh=1
type=rpm-md

```

```auto
# rpm -q --qf '%{NAME}-%{VERSION}-%{RELEASE} %{SIGPGP:pgpsig} %{SIGGPG:pgpsig}\n' -p opensearch-3.0.0-linux-x64.rpm 
warning: opensearch-3.0.0-linux-x64.rpm: Header V4 RSA/SHA512 Signature, key ID 6ba2427f: NOKEY
opensearch-3.0.0-1 RSA/SHA512, Sat 03 May 2025 07:36:27 AM UTC, Key ID 4e9275ee6ba2427f (none)

```

Key import:

```auto
# sudo rpm --import https://artifacts.opensearch.org/publickeys/opensearch-release.pgp
# rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\t%{SIGPGP:pgpsig}\n'|grep opensearch
gpg-pubkey-81191457-67ca24f2	gpg(OpenSearch Project <release@opensearch.org>)	(none)

```

Yum install:

```auto
Total download size: 881 M
Downloading packages:
No Presto metadata available for opensearch-3.x
warning: /var/cache/yum/x86_64/7/opensearch-3.x/packages/opensearch-3.0.0-linux-x64.rpm: Header V4 RSA/SHA512 Signature, key ID 6ba2427f: NOKEY======================= ] 55 MB/s | 870 MB 00:00:00 ETA 
Public key for opensearch-3.0.0-linux-x64.rpm is not installed
opensearch-3.0.0-linux-x64.rpm | 881 MB 00:00:15     
Retrieving key from https://artifacts.opensearch.org/publickeys/opensearch-release.pgp

The GPG keys listed for the "OpenSearch 3.x" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.

 Failing package is: opensearch-3.0.0-1.x86_64
 GPG Keys are configured as: https://artifacts.opensearch.org/publickeys/opensearch-release.pgp

```

Are the doc links and repo-files incorrect for the gpg key for the 3.0 release?