You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
$ cat /etc/yum.repos.d/microsoft.repo
[packages-microsoft-com-prod]
name=packages-microsoft-com-prod
baseurl=https://packages.microsoft.com/rhel/10/prod/
enabled=1
gpgcheck=1
gpgkey=https://packages.microsoft.com/keys/microsoft.asc
$ dnf download powershell
Updating and loading repositories:
Repositories loaded.
Downloading Packages:
powershell-0:7.6.4-1.rh.x86_64
$ rpm --checksig powershell-7.6.4-1.rh.x86_64.rpm
powershell-7.6.4-1.rh.x86_64.rpm: digests SIGNATURES NOT OK
$ rpmkeys --list | grep -i microsoft
bc528686b50d79e339d3721ceb3e94adbe1229cf Microsoft (Release signing) <gpgsecurity@microsoft.com> public key
Expected behavior
The RPM passes verification
Actual behavior
RPM fails GPG verification
Environment data
NA
OS Data
Fedora 44
$ uname -r
7.1.4-204.fc44.x86_64
Windows update log
NA
Visuals
I have another machine where it points to the RHEL 9 repo (baseurl=https://packages.microsoft.com/rhel/9/prod/), and there the RPM is correctly signed.
$ sha256sum powershell-7.6.4-1.rh.x86_64.rpm
9d82cea75ad553fe8eb06e0e28d1dcd50dc42e63566a31a8d561caff86f8fbde powershell-7.6.4-1.rh.x86_64.rpm
$ rpm -K ./powershell-7.6.4-1.rh.x86_64.rpm # from RHEL 9 repo
./powershell-7.6.4-1.rh.x86_64.rpm: digests signatures OK
$ sha256sum powershell-7.6.4-1.rh.x86_64.rpm
fb55ff4c7f2a6e2174b1597068612ebd54e95a4e7d8b5d7f82506941145878ba powershell-7.6.4-1.rh.x86_64.rpm
$ rpm -K powershell-7.6.4-1.rh.x86_64.rpm # from RHEL 10 repo
powershell-7.6.4-1.rh.x86_64.rpm: digests SIGNATURES NOT OK
Prerequisites
Steps to reproduce
Expected behavior
The RPM passes verificationActual behavior
RPM fails GPG verificationEnvironment data
OS Data
Windows update log
Visuals
I have another machine where it points to the RHEL 9 repo (
baseurl=https://packages.microsoft.com/rhel/9/prod/), and there the RPM is correctly signed.