Description of problem: When downloading the .repo file from https://fedoraproject.org/wiki/Windows_Virtio_Drivers you'll see that it has gpgcheck=0 set. When setting to 1, installing any package from this repo will fail due to missing signatures.
This is something on the yum/dnf repo + packaging side, so assigning to myself. No idea if/when I'll get to it though
This bug has a security impact as it allows simple man-in-the-middle-attacks. Can you please fix it?
*** Bug 1381004 has been marked as a duplicate of this bug. ***
I moved this to the github tracker: https://github.com/crobinso/virtio-win-pkg-scripts/issues/24 We are working on moving ownership of the RPM builds from me to the virtio-win devs directly, but I think in the medium term I will still maintain the fedorapeople repo. When we sort out the transition I will look into implementing this