Bug 17434 - mga6: java packages: Missing signature
Summary: mga6: java packages: Missing signature
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: Cauldron
Hardware: x86_64 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Nicolas Lécureuil
QA Contact:
URL:
Whiteboard:
Keywords:
: 17435 17758 17760 (view as bug list)
Depends on:
Blocks:
 
Reported: 2016-01-02 12:47 CET by Bit Twister
Modified: 2016-07-06 20:05 CEST (History)
2 users (show)

See Also:
Source RPM:
CVE:
Status comment:


Attachments

Description Bit Twister 2016-01-02 12:47:00 CET
Description of problem:

/var/cache/urpmi/rpms/apache-commons-logging-1.2-4.mga6.noarch.rpm: Missing signature (OK ((none)))

Version-Release number of selected component (if applicable):


How reproducible: always


Steps to Reproduce:
1. urpmi --download-all  --downloader wget --auto --auto-update 
2.
3.


Reproducible: 

Steps to Reproduce:
Comment 1 Marja Van Waes 2016-01-04 20:34:16 CET
As said 3 days ago by neoclust in the 

"[dev] libreoffice pacakges are not signed" thread on dev ml:

> For Java packages this is normal, we are in a middle of a complete bootstrap,
> a mass rebuild will be done when the bootstrap will be done. 

I'll leave this report open in case more users have questions about it, even if neoclust asked not to file bug reports about unsigned java packages (after this bug was already filed.)

CC: (none) => marja11
Summary: mga6: apache-commons Missing signature => mga6: java packages: Missing signature

Comment 2 Marja Van Waes 2016-01-04 20:35:19 CET
*** Bug 17435 has been marked as a duplicate of this bug. ***
Rémi Verschelde 2016-01-25 09:32:22 CET

Assignee: bugsquad => mageia

Comment 3 Marja Van Waes 2016-02-13 21:59:53 CET
*** Bug 17758 has been marked as a duplicate of this bug. ***
Comment 4 Marja Van Waes 2016-02-13 22:25:49 CET
*** Bug 17760 has been marked as a duplicate of this bug. ***
Comment 5 Bit Twister 2016-02-23 10:25:45 CET
And our latest missing signature file is:    ecj-4.5.1-1.mga6.noarch.rpm
Quick summary of those others are:
17760 - mga6: qdox-2.0-0.4.M3.mga6.noarch.rpm: Missing signature
17758 - mga6: xerces-j2-2.11.0-23.mga6.noarch.rpm: Missing signature
17753 - mga6: objectweb-asm-5.0.4-1.mga6.noarch.rpm: Missing signature
17637 - mga6: breeze-common-5.5.4-1 Missing signature
17518 - mga6: bouncycastle-pkix-1.52-7 Missing signature
17435 - mga6: geronimo-jms Missing signature
17434 - mga6: apache-commons Missing signature
Comment 6 Marja Van Waes 2016-02-23 10:32:44 CET
(In reply to Bit Twister from comment #5)
> And our latest missing signature file is:    ecj-4.5.1-1.mga6.noarch.rpm
> Quick summary of those others are:

Thanks a lot for listing the ones you found :-)

@ david_david
@ neoclust

If it's easy for you to list the others in this report, then please do so

CC: (none) => geiger.david68210

Comment 7 Marja Van Waes 2016-02-23 10:33:48 CET
(In reply to Marja van Waes from comment #6)

> 
> @ david_david
> @ neoclust
> 
> If it's easy for you to list the others in this report, then please do so

ah, and I don't object against an alphabetical list ;-)
Comment 8 Nicolas Lécureuil 2016-02-23 10:50:14 CET
no need to list them :)  Java Mass rebuild is in progress :)
Comment 9 Bit Twister 2016-02-26 03:35:06 CET
(In reply to Nicolas Lécureuil from comment #8)
> no need to list them :)  Java Mass rebuild is in progress :)

I am impressed if that rebuilds the ones I know about.

(In reply to Marja van Waes from comment #6)
> ah, and I don't object against an alphabetical list ;-)

Ok. :-D

apache-commons
apache-commons-codec-1.10-2.mga6.noarch.rpm
apache-commons-lang-2.6-17.mga6.noarch.rpm
bouncycastle-1.52-7.mga6.noarch.rpm
bouncycastle-mail-1.52-6.mga6.noarch.rpm
bouncycastle-pkix-1.52-7
breeze-common-5.5.4-1
ecj-4.5.1-1.mga6.noarch.rpm
geronimo-jms
jakarta-commons-httpclient-3.1-23.mga6.noarch.rpm
objectweb-asm-5.0.4-1.mga6.noarch.rpm
objectweb-asm-5.0.4-1.mga6.noarch.rpm
qdox-2.0-0.4.M3.mga6.noarch.rpm
xerces-j2-2.11.0-23.mga6.noarch.rpm
Comment 10 Marja Van Waes 2016-03-01 16:19:03 CET
(In reply to Bit Twister from comment #9)
> (In reply to Nicolas Lécureuil from comment #8)
> > no need to list them :)  Java Mass rebuild is in progress :)
> 
> I am impressed if that rebuilds the ones I know about.

On one of my systems, I had about 20 java packages without signatures (including most of your list) in the skip.list. I've removed them all now, because all new signed packages were available.

The only exception was tagsoup, which was in my skip.list, but there doesn't seem to be a new version (neither signed nor unsigned now) ... maybe it shouldn't have been in my skip.list?
Comment 11 Marja Van Waes 2016-03-01 16:20:21 CET
s/version/version or release/
Comment 12 Bit Twister 2016-07-06 20:05:11 CEST
Problem no longer occurs.

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.