Bug 2227527

Summary: Bad GPG signature found - Tailscale
Product: [Fedora] Fedora Reporter: ecrosby1971
Component: plasma-discoverAssignee: Rex Dieter <rdieter>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 38CC: daniel.mach, jmracek, jrohel, kde-sig, mblaha, packaging-team-maint, pkratoch, ppisar, rdieter, rpm-software-management
Target Milestone: ---Keywords: Desktop
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description ecrosby1971 2023-07-30 13:33:24 UTC
I’m using Fedora 38 Plasma. I’ve been dealing with this for awhile. I’ve reported it to Tailscale but they state it would be an upstream (KDE) issue to be resolved. However, KDE has stated it is not their issue, but to file a Bugzilla.
Every time I attempt an update within Discover whenever there is a Tailscale update included, I receive this error:

    Bad GPG signature found:
    /var/cache/PackageKit/38/metadata/tailscale-stable-38-x86_64/packages/tailscale_1.46.1_x86_64.rpm could not be verified.
    /var/cache/PackageKit/38/metadata/tailscale-stable-38-x86_64/packages/tailscale_1.46.1_x86_64.rpm: digest: SIGNATURE: NOT OK

I can open a terminal and complete a dnf update with no issues and that has been my workaround for the past several months.

Reproducible: Always

Steps to Reproduce:
1. Open Discover to complete updates in Fedora Plasma
2. If Tailscale update is included, error will be seen
3. Complete updates in terminal using DNF instead of Discover. Or, complete package update of Tailscale within terminal and use Discover to finish other updates.
Actual Results:  
Error within Discover:

Bad GPG signature found:

/var/cache/PackageKit/38/metadata/tailscale-stable-38-x86_64/packages/tailscale_1.46.1_x86_64.rpm could not be verified. /var/cache/PackageKit/38/metadata/tailscale-stable-38-x86_64/packages/tailscale_1.46.1_x86_64.rpm: digest: SIGNATURE: NOT OK

And no updates at all can be completed.

Expected Results:  
Complete all updates, even Tailscale.

Comment 1 Petr Pisar 2023-07-31 13:08:25 UTC
According your report, DNF works, but Fedora's Discover does not work. Reassigning to plasma-discover component.