Package tzdata-java-2022f-1.el8.noarch.rpm is not signed

Rocky Linux General
1

Not sure how an unsigned package got through, but I get an error updating tzdata-java-2022f-1.el8.noarch.rpm.
It’s stored in AppStream/x86_64/os/Packages/t/tzdata-java-2022f-1.el8.noarch.rpm

Obvious workaround is to install with --nogpgp but that kinda defeats the purpose of package signatures.

If this isn’t the best place to report it, would appreciate pointer.
Thanks!

2
3

Nevermind, just found 0000694: tzdata-2022f-1.el8.noarch.rpm and tzdata-java-2022f-1.el8.noarch.rpm are not signed - Rocky BugTracker

1 Like
4

Thank YOU! My scalp is relieved to hear that this wasn’t my fault…

5

Seeing this now … are we still waiting for mirrors to finish updating? Our upstream is dl.rockylinux.org in the US (mirroring to Fastly):

# yum download tzdata-java-2022f
Rocky-AppStream                                                                                                                                                                                                                        29 kB/s | 4.7 kB     00:00    
[MIRROR] tzdata-java-2022f-1.el8.noarch.rpm: Downloading successful, but checksum doesn't match. Calculated: 66a8e009c8a7939c53d93e6f3266de56f42c337fbf13ad9e0294f4f2f5b12f56(sha256)  Expected: 0a7ca48030df3fda59da01d6e365550ff67b508a4583d00d2f348b9a50550984(sha256) 
[MIRROR] tzdata-java-2022f-1.el8.noarch.rpm: Downloading successful, but checksum doesn't match. Calculated: 66a8e009c8a7939c53d93e6f3266de56f42c337fbf13ad9e0294f4f2f5b12f56(sha256)  Expected: 0a7ca48030df3fda59da01d6e365550ff67b508a4583d00d2f348b9a50550984(sha256) 
[MIRROR] tzdata-java-2022f-1.el8.noarch.rpm: Downloading successful, but checksum doesn't match. Calculated: 66a8e009c8a7939c53d93e6f3266de56f42c337fbf13ad9e0294f4f2f5b12f56(sha256)  Expected: 0a7ca48030df3fda59da01d6e365550ff67b508a4583d00d2f348b9a50550984(sha256) 
[MIRROR] tzdata-java-2022f-1.el8.noarch.rpm: Downloading successful, but checksum doesn't match. Calculated: 66a8e009c8a7939c53d93e6f3266de56f42c337fbf13ad9e0294f4f2f5b12f56(sha256)  Expected: 0a7ca48030df3fda59da01d6e365550ff67b508a4583d00d2f348b9a50550984(sha256) 
[FAILED] tzdata-java-2022f-1.el8.noarch.rpm: No more mirrors to try - All mirrors were already tried without success

cheers,
Klaus

6

Most mirrors should be up to date. If you are going to dl.rockylinux.org (which is where all mirrors get content from) it should be working as the fastly cache was purged over 12 hours ago.

[label@sani tmp]$ wget http://dl.rockylinux.org/pub/rocky/8/AppStream/x86_64/os/Packages/t/tzdata-java-2022f-1.el8.noarch.rpm
--2022-11-04 23:26:40--  http://dl.rockylinux.org/pub/rocky/8/AppStream/x86_64/os/Packages/t/tzdata-java-2022f-1.el8.noarch.rpm
Resolving dl.rockylinux.org (dl.rockylinux.org)... 199.232.198.132, 199.232.194.132, 2a04:4e42:4c::644, ...
Connecting to dl.rockylinux.org (dl.rockylinux.org)|199.232.198.132|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 188520 (184K) [application/x-redhat-package-manager]
Saving to: ‘tzdata-java-2022f-1.el8.noarch.rpm’

tzdata-java-2022f-1.el8.noarch.rpm                    100%[======================================================================================================================>] 184.10K  --.-KB/s    in 0.02s

2022-11-04 23:26:40 (7.22 MB/s) - ‘tzdata-java-2022f-1.el8.noarch.rpm’ saved [188520/188520]

[label@sani tmp]$ sha256sum tzdata-java-2022f-1.el8.noarch.rpm
0a7ca48030df3fda59da01d6e365550ff67b508a4583d00d2f348b9a50550984  tzdata-java-2022f-1.el8.noarch.rpm
7

Hrm, I bet there’s a proxy or a firewall somewhere in our corporate network interfering with things right now, but I think I can just push a copy of this package to the local internal mirror for now to keep things functional. Thanks for the tip @nazunalika !

8

How is this possible? (Landing in the repo, passing the gate without signing it?) Any explanation and measures to avoid this in the future? Thx!