Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Re-sign automake116 packages for compatibility with CentOS 9 #9

Closed
andrey-utkin opened this issue Jul 12, 2022 · 2 comments
Closed
Assignees

Comments

@andrey-utkin
Copy link

In an effort to add CI testing of RNP on CentOS 9 I have hit an issue that CentOS 9's package manager refuses to read the ribose-automake116* packages:

 + sudo dnf -y -q install clang gcc gcc-c++ make autoconf automake libtool bzip2 gzip bison byacc bzip2-devel gettext-devel ncurses-devel python3 ribose-automake116 ruby-devel zlib-devel cmake texinfo
warning: Signature not supported. Hash algorithm SHA1 not available.
warning: Signature not supported. Hash algorithm SHA1 not available.
warning: Signature not supported. Hash algorithm SHA1 not available.
warning: Signature not supported. Hash algorithm SHA1 not available.
warning: Signature not supported. Hash algorithm SHA1 not available.
warning: Signature not supported. Hash algorithm SHA1 not available.
Problem opening package ribose-automake116-1.1-1.el7.x86_64.rpm
Problem opening package ribose-automake116-automake-1.16.1-1.el7.noarch.rpm
Problem opening package ribose-automake116-runtime-1.1-1.el7.x86_64.rpm
Error: GPG check FAILED

There is a discussion of the same issue happening on another project which also publishes their own RPM packages: k3s-io/k3s#5588 . They have pinpointed it that the packages are rejected because they are signed with SHA1 which has been deprecated. There is a patch which was confirmed to fix it: https://github.com/k3s-io/k3s-selinux/pull/32/files . As I understand the signer could alternatively disable SHA1 signing in gnupg's config.

@ribose-jeffreylau
Copy link
Contributor

andrey-utkin added a commit to rnpgp/rnp that referenced this issue Jul 13, 2022
Doesn't work yet. To be revisited upon resolution of
riboseinc/yum#9
andrey-utkin added a commit to rnpgp/rnp that referenced this issue Jul 15, 2022
Doesn't work yet. To be revisited upon resolution of
riboseinc/yum#9
andrey-utkin added a commit to rnpgp/rnp that referenced this issue Jul 15, 2022
Doesn't work yet. To be revisited upon resolution of
riboseinc/yum#9
@ribose-jeffreylau
Copy link
Contributor

@andrey-utkin The automake rpms have been re-signed correctly, hopefully!

ni4 pushed a commit to rnpgp/rnp that referenced this issue Aug 8, 2022
Doesn't work yet. To be revisited upon resolution of
riboseinc/yum#9
ronaldtse pushed a commit to rnpgp/rnp that referenced this issue Sep 8, 2022
Doesn't work yet. To be revisited upon resolution of
riboseinc/yum#9
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants