Bug 35063 - Unable to upgrade Mageia10-alpha1 due to certificate error
Summary: Unable to upgrade Mageia10-alpha1 due to certificate error
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Installer (show other bugs)
Version: 10
Hardware: x86_64 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: All Packagers
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-01-24 19:32 CET by Flaviano Matos
Modified: 2026-03-18 02:32 CET (History)
2 users (show)

See Also:
Source RPM:
CVE:
Status comment:


Attachments

Description Flaviano Matos 2026-01-24 19:32:32 CET
During upgrade, certificates are being rejected, and the installation can not proceed.
Example of error (obtained from an OCR'd picture):

2. Certificate B742FASB8842GF66 invalid: policy violation
because: No binding signature at time 2026-801-24T16 :39 : 1862
because: Policy rejected non-revocation signature CPositiveCertif ication) requiring second pre-image resistance
because: SHA1 is not considered secure since 2623-62-81T8B : 46 :G6Z p :
ror: Verifying a signature using certificate @GEDB89585B912A8916FEDFSB74Z2FASBSG42EF66 (Mageia Packages <packages@mageia.org>):
1. Certificate B74Z2FASB8G42GF66 invalid: policy violation
Comment 1 Morgan Leijström 2026-01-25 16:34:34 CET
Hi Flaviano

To clarify: You did an install to disk from Mageia10-alpha1 installer ISO?

> because: SHA1 is not considered secure since 2623-62-81T8B : 46 :G6Z p :

Probably an OCR fail - but is your clock set to correct date?

Try another mirror, such as the reliable
https://mirror.accum.se/mirror/mageia/distrib/10/...

Use "File -> Add a specific media mirror:" at
https://doc.mageia.org/mcc/9/en/content/software-management.html#drakrpm-edit-media

CC: (none) => fri

Comment 2 Flaviano Matos 2026-01-25 16:43:50 CET
> To clarify: You did an install to disk from Mageia10-alpha1 installer ISO?

I tried. I wanted to test an update.


> Probably an OCR fail - but is your clock set to correct date?

My clock is set to the correct date. As soon the date command was available, I checked that.

> Try another mirror, such as the reliable

I'll try that mirror. Thanks.
Comment 3 Lewis Smith 2026-01-25 17:43:34 CET
Is this an Upgrade from Mageia 9 to 10 using M10 Classic Installer? And if so - just asa test, I hope; in which case errors are good to know. Do not expect it to work at this stage. Backup the original M9 partition first.

CC: (none) => lewyssmith

Comment 4 Morgan Leijström 2026-01-25 17:47:57 CET
I was writing an answer too, posting it anyway :-)

(In reply to Flaviano Matos from comment #2)
> > To clarify: You did an install to disk from Mageia10-alpha1 installer ISO?
> 
> I tried. I wanted to test an update.

Of you mean *upgrade* from Mageia 9 it is not yet supported.
Basically it works but there is something about certificates, and Plasma, at least, that need manual interaction.

Installing 10Alpha1 and then updating is supported.

If you like testing, you are much welcome to join our QA group :-)
Comment 5 Morgan Leijström 2026-01-25 17:50:22 CET
(In reply to Morgan Leijström from comment #1)
> Use "File -> Add a specific media mirror:" at
> https://doc.mageia.org/mcc/9/en/content/software-management.html#drakrpm-
> edit-media

I forgot to write you should also remove other repos then.
Comment 6 Flaviano Matos 2026-01-25 18:26:17 CET
It's just test. Since that computer has an AMOLED screen, I don't use Mageia there very often, but I will backup M9 the next time, so that I can test updating again on the next iteration, should I have problems with the first try.

I would like to join the QA group, but I don't know how.
Comment 7 Lewis Smith 2026-01-25 19:06:44 CET
(In reply to Flaviano Matos from comment #6)
> I would like to join the QA group, but I don't know 
Start here: https://wiki.mageia.org/en/QA_Team
There are detailed procedures about routine work, and pre-release ISO testing.

CC'ing TJ who is QA team leader. QA is a good team.

CC: (none) => andrewsfarm

Comment 8 Morgan Leijström 2026-01-25 19:09:35 CET
Welcome Flaviano!

Another entry point:
https://wiki.mageia.org/en/QA_Team_portal

Top pages about contributing:
https://www.mageia.org/en/contribute/
https://wiki.mageia.org/en/Contributing


Tip: When you are going to test an upgrade from Mageia9, enable online repositories so you get the updates right away.  Or even use the netinstaller.
Comment 9 katnatek 2026-01-26 02:03:57 CET
What is the output of
LC_ALL=C rpm -q gpg-pubkey-80420f66-4d4fe123 --queryformat='%{DESCRIPTION}\n' | gpg2 --show-key

Is your system updated?

What is the output of

rpm -q mageia-release-Default

Did you reboot the system after updates from https://advisories.mageia.org/MGAA-2025-0109.html ?
Comment 10 Flaviano Matos 2026-01-26 16:24:47 CET
The output of:

LC_ALL=C rpm -q gpg-pubkey-80420f66-4d4fe123 --queryformat='%{DESCRIPTION}\n' | gpg2 --show-key

is:

 pub   rsa4096 2011-02-07 [SCEA] [expires: 2029-12-31]
      00EDB89585B012A8916F0DF8B742FA8B80420F66
uid                      Mageia Packages <packages@mageia.org>


The output of  rpm -q mageia-release-Default

mageia-release-Default-9-2.3..

I think I did not reboot my computer.
Comment 11 katnatek 2026-01-29 20:33:57 CET
If you can boot to your system, Please try

https://bugs.mageia.org/show_bug.cgi?id=34927#c3
Comment 12 Flaviano Matos 2026-01-29 20:52:01 CET
I am closing this bug report, since upgrading from the alfa media is not supported. I thank everyone for your patience and guidance. I'm looking forward to join the QA team and contribute there.

Status: NEW => RESOLVED
Resolution: (none) => INVALID

Comment 13 Morgan Leijström 2026-01-29 21:33:10 CET
(In reply to Flaviano Matos from comment #12)
> I am closing this bug report, since upgrading from the alfa media is not
> supported.

I reopen this so it can get solved so it really works when it must :-)
- Certificates problem must be sorted.

> I'm looking forward to join the QA team and contribute there.

Yes, it would be nice if you join, and then we can also give you access to current internal beta1 to try for this bug.

Read the links provided in comment 7 8

Join QA mail list and post a message presenting yourself, and that you want to join QA and also that that you want to be an ISO tester.

Join Doc mail list and ask for edit rights so you can add yourself at bottom of the list at https://wiki.mageia.org/en/QA_ISO_testers

Register for mail lists at https://ml.mageia.org, same login as you use here should work.

Resolution: INVALID => (none)
Status: RESOLVED => REOPENED

Comment 14 Lewis Smith 2026-01-31 21:21:02 CET
(In reply to Morgan Leijström from comment #13)
> (In reply to Flaviano Matos from comment #12)
> > I am closing this bug report, since upgrading from the alfa media is not
> > supported.
This is strictly true; but...
> I reopen this so it can get solved so it really works when it must :-)
> - Certificates problem must be sorted.
Also true.
So launching to packagers.

CC: lewyssmith => (none)
Assignee: bugsquad => pkg-bugs

Comment 15 Flaviano Matos 2026-02-01 23:31:37 CET
I updated the system as advised, and the problem with certificates was solved. I guess the problem was that my computer had not been updated properly (emphasis on properly. I am sure I updated the system before trying to upgrade).

Can I close this bug as solved?
Comment 16 Morgan Leijström 2026-03-18 02:32:02 CET
Closing as fixed.

Resolution: (none) => FIXED
Status: REOPENED => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.