0017632: Appstream repo fails with GPG signature error when repo_gpg check set to 1

ID	Project	Category	View Status	Date Submitted	Last Update

0017632	CentOS-8	general	public	2020-07-30 17:27	2020-07-30 17:27

Reporter	moofrank
Priority	normal	Severity	major	Reproducibility	always
Status	new	Resolution	open
Platform		OS	Centos 8	OS Version
Product Version	8.2.2004
Target Version		Fixed in Version

Summary	0017632: Appstream repo fails with GPG signature error when repo_gpg check set to 1
Description	When repo_gpgcheck=1 is set in CentOS-AppStream.repo dnf fails. dnf -v update Loaded plugins: builddep, changelog, config-manager, copr, debug, debuginfo-install, download, generate_completion_cache, needs-restarting, playground, repoclosure, repodiff, repograph, repomanage, reposync DNF version: 4.2.17 cachedir: /var/cache/dnf User-Agent: constructed: 'libdnf (CentOS Linux 8; generic; Linux.x86_64)' repo: downloading from remote: AppStream CentOS-8 - AppStream 12 MB/s \| 5.8 MB 00:00 AppStream: using metadata from Thu 30 Jul 2020 01:01:06 AM UTC. repo: downloading from remote: BaseOS CentOS-8 - Base 4.8 kB/s \| 811 B 00:00 CentOS-8 - Base 1.6 MB/s \| 1.6 kB 00:00 repo BaseOS: 0x05B555B38483C65D already imported CentOS-8 - Base 33 kB/s \| 811 B 00:00 Error: Failed to download metadata for repo 'BaseOS': repomd.xml GPG signature verification error: Bad GPG signature
Steps To Reproduce	1. Update dnf repo config file CentOS-AppStream.repo by adding this line at the bottom: repo_gpgcheck=1 2. Attempt to update packages through dnf: dnf update -v
Tags	No tags attached.