guillermo-jano opened a new issue, #4368:
URL: https://github.com/apache/couchdb/issues/4368

   Attempting to install the `couchdb` package on an EL 7 system with the 
[suggested repository 
configuration](https://couchdb.apache.org/repo/couchdb.repo) does not work 
because the package is not signed:
   
       Package couchdb-3.3.1-1.el7.x86_64.rpm is not signed
   
   Of course this can be avoided by disabling GPG checks in repo configuration. 
But anyway I guess this should be addressed. I could confirm the previous RPM 
was signed whereas the latest one is not:
   
   ```
   $ rpm --checksig 
https://apache.jfrog.io/artifactory/couchdb-rpm/el7/x86_64/couchdb-3.3.0-1.el7.x86_64.rpm
 
https://apache.jfrog.io/artifactory/couchdb-rpm/el7/x86_64/couchdb-3.3.1-1.el7.x86_64.rpm
   
https://apache.jfrog.io/artifactory/couchdb-rpm/el7/x86_64/couchdb-3.3.0-1.el7.x86_64.rpm:
 rsa sha1 (md5) pgp md5 OK
   
https://apache.jfrog.io/artifactory/couchdb-rpm/el7/x86_64/couchdb-3.3.1-1.el7.x86_64.rpm:
 sha1 md5 OK
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to