Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RPM] obscure signature in jdk temurin subpkg #649

Open
andrlos opened this issue Apr 4, 2023 · 0 comments
Open

[RPM] obscure signature in jdk temurin subpkg #649

andrlos opened this issue Apr 4, 2023 · 0 comments
Labels

Comments

@andrlos
Copy link

andrlos commented Apr 4, 2023

Hi, so for all three versions of jdk rpm packages there is an extra signature on jdk packages.
Look for yourself with: rpm -K --verbose rpmFileName
example outputs:
rpms/temurin-11-jdk-11.0.18.0.0.10-2.x86_64.rpm:
Header V4 RSA/SHA256 Signature, key ID 65f8f04b: NOKEY
Header SHA256 digest: OK
Header SHA1 digest: OK
Payload SHA256 digest: OK
MD5 digest: OK

rpms/temurin-11-jre-11.0.18.0.0.10-2.x86_64.rpm:
Header SHA256 digest: OK
Header SHA1 digest: OK
Payload SHA256 digest: OK
MD5 digest: OK

My issues are all connected to the first line in the jdk package output:

  1. I keep getting me warnings about missing key when analyzing the rpm.
  2. why is the signature even there? is that a legacy obsolete forgotten piece of code or an attempt of something new? There is no such thing with ojdk rpms
@andrlos andrlos changed the title [RPM] man pages not linked properly for jre package temurin [RPM] obscure signature in jdk temurin subpkg Apr 4, 2023
@karianna karianna added the bug label Apr 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants