On Thu, 2022-09-15 at 16:18 +0300, Otto Liljalaakso wrote:
To test this, I did enable TEST-FEDORA39 on my system, first
installed
as Fedora 24, now running 36. For some rpm and dnf operations, I get
the
following kind of errors:
error: rpmdbNextIterator: skipping h# 740
Header V3 RSA/SHA1 Signature, key ID d651ff2e: BAD
Header SHA256 digest: OK
Header SHA1 digest: OK
I first noticed this with 'dnf upgrade', simplified to 'dnf reinstall
glibc', perhaps the best reproduces is 'rpm -qa > /dev/null'.
Regardless of these errors, all the commands work as expected. Still
I
wonder, is it expected that old installations will see, and keep
seeing,
these errors after distrusting SHA-1?
That is the RPM Fusion signing key.