Bug 137514

Summary: unsigned package initscripts-7.93.2-1.i386.rpm
Product: [Fedora] Fedora Reporter: Mace Moneta <moneta.mace>
Component: initscriptsAssignee: Bill Nottingham <notting>
Status: CLOSED RAWHIDE QA Contact: Brock Organ <borgan>
Severity: low Docs Contact:
Priority: medium    
Version: 3CC: rvokal, sopwith
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-10-29 19:18:33 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Mace Moneta 2004-10-29 00:40:01 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; rv:1.7.3) Gecko/20041020
Firefox/0.10.1

Description of problem:
Yum update fails due to unsigned package:

...
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for initscripts to pack into transaction set.
initscripts-7.93.2-1.i386 100% |=========================|  86 kB    00:08
---> Package initscripts.i386 0:7.93.2-1 set to be updated
--> Running transaction check

Dependencies Resolved
Transaction Listing:
  Update: initscripts.i386 0:7.93.2-1
Downloading Packages:
initscripts-7.93.2-1.i386 100% |=========================| 1.0 MB    00:07
unsigned package
//var/cache/yum/development/packages/initscripts-7.93.2-1.i386.rpm


Version-Release number of selected component (if applicable):
initscripts-7.93.2-1.i386.rpm

How reproducible:
Always

Steps to Reproduce:
1.Attempt update of initscripts for FC3T3
2.
3.
    

Actual Results:  unsigned package
//var/cache/yum/development/packages/initscripts-7.93.2-1.i386.rpm


Expected Results:  Update applied

Additional info:

This can be bypassed with gpgcheck=0 in /etc/yum.conf, but that would
not be secure.

Comment 1 Bill Nottingham 2004-10-29 19:18:33 UTC
The package is signed, looking at the internal tree. It should make
its way out in a signed state eventually.