View Issue Details

IDProjectCategoryView StatusLast Update
0015732CentOS-7[All Projects] generalpublic2019-01-23 07:11
Reporterngompa 
PriorityhighSeveritymajorReproducibilityalways
Status newResolutionopen 
Product Version7.6.1810 
Target VersionFixed in Version 
Summary0015732: SCL repository metadata isn't properly signed with SCLo GPG key
DescriptionThe repositories for SCLs do not appear to have the metadata signed with the SCLo GPG key anymore. This needs to be fixed. Potentially other repositories are affected, but this one was the one that was noticed immediately.
Steps To Reproduce1. Download repomd.xml and repomd.xml.asc files
2. Import the SCLo GPG key
3. Attempt to verify it with "gpg2 --verify repomd.xml.asc repomd.xml"
Additional InformationThis was discovered by Adrian Schröter from openSUSE, who runs the openSUSE Build Service.
TagsNo tags attached.
abrt_hash
URLhttps://lists.opensuse.org/opensuse-buildservice/2019-01/msg00041.html

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2019-01-22 15:18 ngompa New Issue