[
https://issues.apache.org/jira/browse/CASSANDRA-13440?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15969711#comment-15969711
]
Michael Shuler commented on CASSANDRA-13440:
--------------------------------------------
GPG signature on {{repomd.xml}} must not be sufficient. CentOS7 complained
{{Package cassandra-3.0.13-1.noarch.rpm is not signed}} with gpgcheck enabled.
Here's a good non-gpg-check yum config:
{noformat}
[cassandra]
name=Apache Cassandra
baseurl=https://www.apache.org/dist/cassandra/redhat/30x/
gpgcheck=0
gpgkey=https://www.apache.org/dist/cassandra/KEYS
{noformat}
> Sign RPM artifacts
> ------------------
>
> Key: CASSANDRA-13440
> URL: https://issues.apache.org/jira/browse/CASSANDRA-13440
> Project: Cassandra
> Issue Type: Sub-task
> Components: Packaging
> Reporter: Stefan Podkowinski
>
> RPMs should be gpg signed just as the deb packages. Also add documentation
> how to verify to download page.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
