[packman] digests SIGNATURES NOT OK

Marc Schiffbauer marc at links2linux.de
Sun Dec 12 09:20:39 CET 2021


Hi Giacomo,

we should really create a new gpg key for the repo.

@Stefan: What do you think?

-Marc

* Giacomo Comes schrieb am 24.10.21 um 19:23 Uhr:
> Hi,
> On Leap 15.3 if I run:
>   rpm -K <rpm package>
> the output is usually:
>   digests signatures OK
> However if I do that with any rpm from the packman repository
> the output is:
>   digests SIGNATURES NOT OK
> This was not happening before but it started recently after 
> the package rpm was updated to version 4.14.3-40.1
> The reason is that since that version the packages contains a backport
> patch meant to fix the following bug:
>   https://bugzilla.opensuse.org/show_bug.cgi?id=1185299
> and now all the rpms from packman fails the rpm -K test.
> 
> The consequence is that when I try to build locally an rpm
> using the command 'build' and the rpm I'm building has:
> BuildRequires:    <rpm from packman repository>
> in the spec file, the build process fails with the error message:
>   rpm verify failed
> 
> For the moment I overcome the problem by passing the option --nosignature to
> the command init_buildsystem
> 
> However I was wondering if there is any plan to fix the rpms in the packman repository.
> 
> Regards,
> Giacomo
> 
> _______________________________________________
> Packman mailing list
> Packman at links2linux.de
> https://lists.links2linux.de/cgi-bin/mailman/listinfo/packman

-- 
0xCA3E7BF67F979BE5 - F7FB 78F7 7CC3 79F6 DF07
                     6E9E CA3E 7BF6 7F97 9BE5



More information about the Packman mailing list