Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1ryyH7-001L0Q-UT for pgsql-pkg-yum@arkaria.postgresql.org; Mon, 22 Apr 2024 18:20:22 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1ryyH6-00Bvhx-L4 for pgsql-pkg-yum@arkaria.postgresql.org; Mon, 22 Apr 2024 18:20:20 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1ryyH6-00Bvhp-Du for pgsql-pkg-yum@lists.postgresql.org; Mon, 22 Apr 2024 18:20:20 +0000 Received: from ns7.gunduz.org ([165.232.104.158]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1ryyH3-002NoV-Gp for pgsql-pkg-yum@postgresql.org; Mon, 22 Apr 2024 18:20:19 +0000 Received: from dell-laptop07.gunduz.org (unknown [85.100.246.17]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ns7.gunduz.org (Postfix) with ESMTPSA id 9678630001CE; Mon, 22 Apr 2024 18:20:15 +0000 (UTC) Message-ID: <6675a26e4a8f5ad355769202174609ba9412e30a.camel@gunduz.org> Subject: Re: Non-signed packages in PostgreSQL 14 repo for RHEL 9 From: Devrim =?ISO-8859-1?Q?G=FCnd=FCz?= To: gunnar.a.andersson@trafikverket.se Cc: Magnus Hagander , pgsql-pkg-yum Date: Mon, 22 Apr 2024 19:20:14 +0100 In-Reply-To: References: Autocrypt: addr=devrim@gunduz.org; prefer-encrypt=mutual; keydata=mQINBFN+TjkBEAC6pudhV1V54kHPe91nr6Erz6VuG93VKfcHOHN86yET35s8ytey7f//m93mW0X6LJUMbY+Z0BztU4EauGAhYRSFzpBWUVBCxaaSyB+l0FR6WtH/Lv6Sxql0GLs6Uhxsk2v3jJtMtk+hFAW2TJInW0ab1xxwTiiHFmSnJOBEK7IMlOOu5kfOAILgGOgiyMUPsDf5iTIJ35iX9hqFvmzMueFVwAExTeTkKCRXvuGXrO28Bbesy6h4GbJe1bUaTwTMEBn90oQD20UUKI9Lvo46c1SkqF1nOSoQA3A2eBjWACq68DQ9Q8TbtkBlL8QKftrFz3SL0jth9ZpxyYfm+jiZ5LEAd717YM7qjvH5Yq0juZO3Ujz2L9RVgyIF1lTQ33fQEuGn797n7LxdaQSdOYK88yrpABic6fJs6rxGy86HcNVHJQCfxgu+uU4eG9/wzBKllXreabD2JJXIRjqvhJTXd7JWaF6TZUEUM0SH2GlA6I2G2vGSyRoe0/jaqUIDGm5drzFGkrK7CwhWzLqxSBlVkCelhOVfDuyit3ypwPhsztTOgZ9w3iwnAPZWuqXbys2Z26H9hQb5eG7xlkCZwlSrmD8mUdHlU5DP84VPIXX6mGCh0I4EJ4ur61CNESpv86BKfGUpbl/3x9XSmcWfvdxB4JnrjHBm9aDIQZzukEJGdiGBpQARAQABtCNEZXZyaW0gR8O8bmTDvHogPGRldnJpbUBndW5kdXoub3JnPokCOQQTAQIAIwUCU35OOQIbAwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJENjDPf6Sz261pAgP/j4OJd8EfBLcdkeYyWKNVV3xN6KGF5tTo5iLjjIBmxmj7403DoigD4qfXY8UQ1hG1e0vTe+zaBuL+fMmn3RgSAcUcjNUjVwcOeGFIMO0uMDX4xnMeAahjuc+2EKBFBW0UY21aH6BdmM98GkU/gyBpaMt/MC+5 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 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.50.4 (3.50.4-1.fc39) MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Hi, Apologies for the inconvenience. A network issue delayed this. Should be fixed now. Regards, Devrim On Wed, 2024-04-17 at 09:03 +0200, Magnus Hagander wrote: > Hi! >=20 > Forwarding this one to the RPM maintrainers. >=20 > //Magnus >=20 > On Wed, Apr 17, 2024 at 8:58=E2=80=AFAM > wrote: >=20 > > Hi, > >=20 > >=20 > >=20 > > I=E2=80=99m not sure where to forward this to, since it=E2=80=99s not a= bug in > > PostgreSQL, > > per se. > >=20 > > But I noticed that there are unsigned packages in this repository: > > https://download.postgresql.org/pub/repos/yum/14/redhat/rhel-9-x86_64/ > >=20 > > I=E2=80=99m using reposync (reposync(1) - Linux manual page (man7.org) > > ) to > > mirror > > the repository but it fails with =E2=80=93gpgcheck since there are unsi= gned > > packages. > >=20 > > This is the GPG key I=E2=80=99m using to verify the packages: > > https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHE= L > >=20 > > Every other package in the repository is signed and works as > > expected. > >=20 > >=20 > >=20 > > Output from reposync: > >=20 > > (946/952): postgis33_14-devel-3.3.6-3PGDG.rhel9=C2=A0 23 kB/s | 8.9 kB > > 00:00 > >=20 > > (947/952): postgis33_14-client-3.3.6-3PGDG.rhel 569 kB/s | 293 kB > > 00:00 > >=20 > > (948/952): postgis33_14-3.3.6-3PGDG.rhel9.x86_6 5.6 MB/s | 4.0 MB > > 00:00 > >=20 > > (949/952): postgis33_14-gui-3.3.6-3PGDG.rhel9.x 943 kB/s | 211 kB > > 00:00 > >=20 > > (950/952): postgis33_14-docs-3.3.6-3PGDG.rhel9.=C2=A0 10 MB/s | 4.8 MB > > 00:00 > >=20 > > (951/952): postgis33_14-llvmjit-3.3.6-3PGDG.rhe 9.4 MB/s | 1.1 MB > > 00:00 > >=20 > > (952/952): postgis33_14-utils-3.3.6-3PGDG.rhel9 345 kB/s |=C2=A0 43 kB > > 00:00 > >=20 > > Removing postgis33_14-3.3.6-3PGDG.rhel9.x86_64.rpm: Package > > postgis33_14-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed > >=20 > > Removing postgis33_14-client-3.3.6-3PGDG.rhel9.x86_64.rpm: Package > > postgis33_14-client-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed > >=20 > > Removing postgis33_14-devel-3.3.6-3PGDG.rhel9.x86_64.rpm: Package > > postgis33_14-devel-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed > >=20 > > Removing postgis33_14-docs-3.3.6-3PGDG.rhel9.x86_64.rpm: Package > > postgis33_14-docs-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed > >=20 > > Removing postgis33_14-gui-3.3.6-3PGDG.rhel9.x86_64.rpm: Package > > postgis33_14-gui-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed > >=20 > > Removing postgis33_14-llvmjit-3.3.6-3PGDG.rhel9.x86_64.rpm: Package > > postgis33_14-llvmjit-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed > >=20 > > Removing postgis33_14-utils-3.3.6-3PGDG.rhel9.x86_64.rpm: Package > > postgis33_14-utils-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed > >=20 > > Error: GPG signature check failed. > >=20 > >=20 > >=20 > > Best regards, > >=20 > > Gunnar Andersson, > >=20 > > Trafikverket > >=20 --=20 Devrim G=C3=BCnd=C3=BCz Open Source Solution Architect, PostgreSQL Major Contributor Twitter: @DevrimGunduz , @DevrimGunduzTR