Bug 735497

Summary:	[gdl] lacks signature
Product:	[Fedora] Fedora	Reporter:	Joachim Frieben <jfrieben>
Component:	gdl	Assignee:	Orion Poplawski <orion>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	15	CC:	orion
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-09-03 19:00:11 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Joachim Frieben 2011-09-02 20:04:26 UTC

Description of problem:
Run 'rpm -qip gdl-0.9.1-1.fc15.x86_64.rpm' and learn to your utmost distress that this package seems to be unsigned:

Name        : gdl
Version     : 0.9.1
Release     : 1.fc15
Architecture: x86_64
Install Date: (not installed)
Group       : Applications/Engineering
Size        : 8160839
License     : GPLv2+
Signature   : (none)
Source RPM  : gdl-0.9.1-1.fc15.src.rpm
Build Date  : Wed 30 Mar 2011 06:09:12 PM CEST
Build Host  : x86-02.phx2.fedoraproject.org
Relocations : (not relocatable)
Packager    : Fedora Project
Vendor      : Fedora Project
URL         : http://gnudatalanguage.sourceforge.net/
Summary     : GNU Data Language
Description :
A free IDL (Interactive Data Language) compatible incremental compiler
(i.e. runs IDL programs). IDL is a registered trademark of Research
Systems Inc.

Version-Release number of selected component (if applicable):
gdl-0.9.1-1.fc15.x86_64.rpm

How reproducible:
Always.

Steps to Reproduce:
1. rpm -qip gdl-0.9.1-1.fc15.x86_64.rpm
  
Actual results:
Signature   : (none)

Expected results:
Signature   : RSA/SHA256, .., Key ID b4ebf579069c8460

Additional info:
Previous build gdl-0.9-6.fc15.x86_64.rpm is also lacking the signature.

Comment 1 Orion Poplawski 2011-09-02 22:00:07 UTC

Where are you downloading it from?  The one I downloaded is signed.

Comment 2 Joachim Frieben 2011-09-03 07:08:46 UTC

Koji build server: Signature   : (none)
Some FTP server:   Signature   : RSA/SHA256, Wed 30 Mar 2011
                                 06:49:50 PM CEST,
                                 Key ID b4ebf579069c8460

Comment 3 Joachim Frieben 2011-09-03 19:00:11 UTC

Koji builds are usually unsigned, thus nothing to worry about ..