Bug 21956 - A lot of package are not signed
Summary: A lot of package are not signed
Status: RESOLVED OLD
Alias: None
Product: Infrastructure
Classification: Unclassified
Component: BuildSystem (show other bugs)
Version: unspecified
Hardware: arm Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Sysadmin Team
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-10-28 13:03 CEST by Daniel Tartavel
Modified: 2022-04-17 05:09 CEST (History)
3 users (show)

See Also:
Source RPM:
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Daniel Tartavel 2017-10-28 13:03:28 CEST 
Description of problem:
When installing packages a lots of errors occurs.
Le paquetage suivant a une signature invalide

 

Version-Release number of selected component (if applicable):
Mageia 6 armv7hl
Comment 1 Nicolas Lécureuil 2017-10-28 18:56:45 CEST 
do you have some exemples ?

CC: (none) => mageia

Comment 2 Daniel Tartavel 2017-11-13 00:31:44 CET 
libjavascriptcore-gir4.0-2.16.6-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, ven. 28 juil. 2017 03:33:18 UTC, Key ID b742fa8b80420f66))
libjavascriptcoregtk4.0_18-2.16.6-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, ven. 28 juil. 2017 03:33:17 UTC, Key ID b742fa8b80420f66))
libsoup-gir2.4-2.58.2-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, jeu. 10 août 2017 20:16:13 UTC, Key ID b742fa8b80420f66))
libsoup-i18n-2.58.2-1.mga6.noarch.rpm: Media sans clé (OK (RSA/SHA1, jeu. 10 août 2017 20:02:27 UTC, Key ID b742fa8b80420f66))
libsoup2.4_1-2.58.2-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, jeu. 10 août 2017 20:16:14 UTC, Key ID b742fa8b80420f66))
libwebkit2gtk4.0_37-2.16.6-1.mga6.armv7hl.rpm: Media sans clé (OK (RSA/SHA1, ven. 28 juil. 2017 03:33:17 UTC, Key ID b742fa8b80420f66))
Comment 3 Nicolas Lécureuil 2017-11-13 09:54:34 CET 
@Pascal: can you take a look please ?

CC: (none) => pterjan

Comment 4 Daniel Tartavel 2019-04-08 12:17:16 CEST 
hi,

bug already valid
Comment 5 Pascal Terjan 2019-04-08 22:46:02 CEST 
Those error messages say the opposite, it tells the packages are signed (with key b742fa8b80420f66) but your media doesn't have a key enabled so it doesn't expect them to be signed
Comment 6 Pascal Terjan 2019-04-09 00:10:59 CEST 
How did you add the media?

urpmi.addmedia --distrib free6-ftp://ftp.free.fr/mirrors/mageia.org/distrib/6/armv7hl/ adds the key correctly:


Core\ Release\ (free6-1) ftp://ftp.free.fr/mirrors/mageia.org/distrib/6/armv7hl/media/core/release {
  key-ids: 80420f66
}
Comment 7 sturmvogel 2022-04-17 05:09:39 CEST 
As this bug was filed against MGA6 (which is EOL since Sep 2019) and the reporter didn't respond...closing this bug as OLD.

Resolution: (none) => OLD
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.