Differences

This shows you the differences between two versions of the page.

--- start [2025-02-03 22:37] – PLD Th 2024 baggins
+++ start [2025-02-09 10:38] (current) – update sequoia news baggins
@@ Line 5: / Line 5: @@
 ===== News =====
+==== 9th February 2025: Sequoia OpenPGP enabled in rpm 4.20 ====
+rpm 4.20 dropped the venerable rpmpgp custom library in favor of rpm-sequoia (https://sequoia-pgp.org/). The side effect is that sequoia is much stricter in validating signatures and fail if the format is non-conformat to the standard.
+If you see errors like the below when doing any rpm operations please read the [[packages/rpm|RPM]] package page.
+  error: rpmdbNextIterator: skipping h#    1292
+  Header DSA signature: BAD (header tag 267: invalid OpenPGP signature: Parsing an OpenPGP packet:
+    Failed to parse Signature Packet
+          because: Signature appears to be created by a non-conformant OpenPGP implementation, see <https://github.com/rpm-software-management/rpm/issues/2351>.
+                because: Malformed MPI: leading bit is not set: expected bit 8 to be set in   100011 (23))
+                Header SHA1 digest: OK
+  error: Verifying a signature, but no certificate was provided:
+    Signature fcf4 created at Thu Aug 16 07:33:10 2018 invalid: signature is not alive
+          because: Expired on 2018-09-15T07:33:10Z
+  error: rpmdbNextIterator: skipping h#     881
+  Header V4 DSA/SHA1 Signature, key ID 61ac3fd4: BAD
+  Header SHA1 digest: OK
 ==== 3rd February 2025: PLD Th 2024 snapshot released ====