Bug 21956

Summary: A lot of package are not signed
Product: Infrastructure Reporter: Daniel Tartavel <contact>
Component: BuildSystemAssignee: Sysadmin Team <sysadmin-bugs>
Status: RESOLVED OLD QA Contact:
Severity: normal    
Priority: Normal CC: mageia, pterjan, sysadmin-bugs
Version: unspecified   
Target Milestone: ---   
Hardware: arm   
OS: Linux   
Whiteboard:
Source RPM: CVE:
Status comment:

Description Daniel Tartavel 2017-10-28 13:03:28 CEST 
Description of problem:
When installing packages a lots of errors occurs.
Le paquetage suivant a une signature invalide

 

Version-Release number of selected component (if applicable):
Mageia 6 armv7hl
Comment 1 Nicolas Lécureuil 2017-10-28 18:56:45 CEST 
do you have some exemples ?

CC: (none) => mageia

Comment 2 Daniel Tartavel 2017-11-13 00:31:44 CET 
libjavascriptcore-gir4.0-2.16.6-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, ven. 28 juil. 2017 03:33:18 UTC, Key ID b742fa8b80420f66))
libjavascriptcoregtk4.0_18-2.16.6-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, ven. 28 juil. 2017 03:33:17 UTC, Key ID b742fa8b80420f66))
libsoup-gir2.4-2.58.2-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, jeu. 10 août 2017 20:16:13 UTC, Key ID b742fa8b80420f66))
libsoup-i18n-2.58.2-1.mga6.noarch.rpm: Media sans clé (OK (RSA/SHA1, jeu. 10 août 2017 20:02:27 UTC, Key ID b742fa8b80420f66))
libsoup2.4_1-2.58.2-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, jeu. 10 août 2017 20:16:14 UTC, Key ID b742fa8b80420f66))
libwebkit2gtk4.0_37-2.16.6-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, ven. 28 juil. 2017 03:33:17 UTC, Key ID b742fa8b80420f66))
Comment 3 Nicolas Lécureuil 2017-11-13 09:54:34 CET 
@Pascal: can you take a look please ?

CC: (none) => pterjan

Comment 4 Daniel Tartavel 2019-04-08 12:17:16 CEST 
hi,

bug already valid
Comment 5 Pascal Terjan 2019-04-08 22:46:02 CEST 
Those error messages say the opposite, it tells the packages are signed (with key b742fa8b80420f66) but your media doesn't have a key enabled so it doesn't expect them to be signed
Comment 6 Pascal Terjan 2019-04-09 00:10:59 CEST 
How did you add the media?

urpmi.addmedia --distrib free6-ftp://ftp.free.fr/mirrors/mageia.org/distrib/6/armv7hl/ adds the key correctly:


Core\ Release\ (free6-1) ftp://ftp.free.fr/mirrors/mageia.org/distrib/6/armv7hl/media/core/release {
  key-ids: 80420f66
}
Comment 7 sturmvogel 2022-04-17 05:09:39 CEST 
As this bug was filed against MGA6 (which is EOL since Sep 2019) and the reporter didn't respond...closing this bug as OLD.

Resolution: (none) => OLD
Status: NEW => RESOLVED