# Tigervnc-icons-1.15.0-6.el9\_7.1.noarch has invalid GPG signature

**URL:** <https://forums.rockylinux.org/t/tigervnc-icons-1-15-0-6-el9-7-1-noarch-has-invalid-gpg-signature/20373>\
**Category:** Rocky Linux Help & Support\
**Tags:** rocky-linux-9\
**Created:** [April 29, 2026, 7:24am UTC](https://forums.rockylinux.org/t/tigervnc-icons-1-15-0-6-el9-7-1-noarch-has-invalid-gpg-signature/20373 "2026-04-29T07:24:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![anon64069268](https://avatars.discourse-cdn.com/v4/letter/a/5f8ce5/32.png) [@anon64069268](https://forums.rockylinux.org/u/anon64069268)\
**Post date:** [April 29, 2026, 7:24am UTC](https://forums.rockylinux.org/t/tigervnc-icons-1-15-0-6-el9-7-1-noarch-has-invalid-gpg-signature/20373/1 "2026-04-29T07:24:47Z")

</div>

The package `tigervnc-icons-1.15.0-6.el9_7.1.noarch.rpm` from the AppStream repository fails GPG verification on Rocky Linux 9.7. The key is present and trusted in the local keyring, all digests are OK, but the RSA signature itself is BAD.

```auto
$ rpm -Kv tigervnc-icons-1.15.0-6.el9_7.1.noarch.rpm
    Header V4 RSA/SHA256 Signature, key ID 350d275d: BAD
    Header SHA256 digest: OK
    Header SHA1 digest: OK
    Payload SHA256 digest: OK
    MD5 digest: OK

```

Key `350d275d` is present in the keyring (Release: `6279464b`). All other packages in the same transaction, including the other `tigervnc-*` subpackages, pass GPG verification without issue.

---

<div class="post-metadata">

**Author:** ![jdieter](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/jdieter/32/5063_2.png) [@jdieter](https://forums.rockylinux.org/u/jdieter)\
**Post date:** [April 29, 2026, 9:49am UTC](https://forums.rockylinux.org/t/tigervnc-icons-1-15-0-6-el9-7-1-noarch-has-invalid-gpg-signature/20373/2 "2026-04-29T09:49:32Z")

</div>

Looking into this. We’ve been having some intermittent signing issues, and thought we’d sorted it out and added validation, but have obviously missed something.

---

<div class="post-metadata">

**Author:** ![jdieter](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/jdieter/32/5063_2.png) [@jdieter](https://forums.rockylinux.org/u/jdieter)\
**Post date:** [April 29, 2026, 2:11pm UTC](https://forums.rockylinux.org/t/tigervnc-icons-1-15-0-6-el9-7-1-noarch-has-invalid-gpg-signature/20373/3 "2026-04-29T14:11:08Z")

</div>

The fixed package has been pushed out to [dl.rockylinux.org](http://dl.rockylinux.org) and the mirrors should pick it up within the next few hours.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [June 28, 2026, 2:11pm UTC](https://forums.rockylinux.org/t/tigervnc-icons-1-15-0-6-el9-7-1-noarch-has-invalid-gpg-signature/20373/4 "2026-06-28T14:11:42Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.