Red Hat Bugzilla – Bug 63378
qt2 package from up2date not gpg signed
Last modified: 2008-05-01 11:38:02 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.8) Gecko/20020301
Description of problem:
The qt2-2.3.1-3.i386.rpm package being distributed via up2date is not gpg signed.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
bash$ rpm -Kvv qt2-2.3.1-3.i386.rpm
D: Expected size: 4609867 = lead(96)+sigs(160)+pad(0)+data(4609611)
D: Actual size: 4609867
MD5 sum OK: c24e403e26e303ff5909c37e13af2ab3
Actual Results: I saw only an md5 checksum, not a gpg signature
Expected Results: I expected a gpg signature.
I'm quite sure that none of the Rawhide and Beta packages are GPG signed.
Doesn't everyone have to turn off GPG checking for the beta?
No, this one slipping through was an accident.
This was fixed on Saturday.
I am closing this as rawhide.