diff --git a/dnf/dnssec.py b/dnf/dnssec.py index cc190c6350..e0a8c5cb93 100644 --- a/dnf/dnssec.py +++ b/dnf/dnssec.py @@ -185,6 +185,10 @@ def _cache_miss(input_key): if ctx.add_ta_file("/var/lib/unbound/root.key") != 0: logger.debug("Unbound context: Failed to add trust anchor file") + if input_key.email == None: + logger.debug("A key has no associated e-mail address") + return Validity.ERROR + status, result = ctx.resolve(email2location(input_key.email), RR_TYPE_OPENPGPKEY, unbound.RR_CLASS_IN) if status != 0: @@ -273,7 +277,13 @@ def _query_db_for_gpg_keys(): return_list = [] for pkg in packages: packager = dnf.rpm.getheader(pkg, 'packager') - email = re.search('<(.*@.*)>', packager).group(1) + if packager == None: + email = None + else: + email = re.search('<(.*@.*)>', packager).group(1) + if email == None: + logger.debug(any_msg(_("Exempting key package {} from a validation because it's not bound to any e-mail address").format(dnf.rpm.getheader(pkg, 'nevra')))) + continue description = dnf.rpm.getheader(pkg, 'description') # Extract Radix-64-encoded PGP key. Without armor headers and # a checksum.