https://bugzilla.novell.com/show_bug.cgi?id=859281 https://bugzilla.novell.com/show_bug.cgi?id=859281#c0 Summary: Validation check fails on 17 Jan nvidia repo for opensuse 13.1 Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: i586 OS/Version: openSUSE 13.1 Status: NEW Severity: Major Priority: P5 - None Component: X11 3rd Party Driver AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: pdallasgr@yahoo.co.uk QAContact: sndirsch@suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0 Hello, there is a new repo build on ftp://download.nvidia.com/opensuse/13.1/ The various directories and files are dated 01/17/2014, 05:01pm to 05:06pm. Adding this repository to my OpenSuse 13.1 installation through Yast -> returns (as it should): "Import untrusted key... blah, blah, F5113243C66B6EAE, Name: NVIDIA Corporation, Fingerprint: 9B76 3D49 D8A5 C892 FC17 8BAC F511 3243 C66B 6EAE" (so I click on Trust). So far, so good. Unfortunately, the validation then fails: "Validation Check Failed. File repomd.xml from repository nvidia ftp://download.nvidia.com/opensuse/13.1/ is signed with the following GnuPG key, but the integrity check failed: ID F5113243C66B6EAE Fingerprint: 9B76 3D49 D8A5 C892 FC17 8BAC F511 3243 C66B 6EAE Name: NVIDIA Corporation Created: 06/15/06 Expires: Never The file has been changed, either by accident or by an attacker, since the repository creator signed it. using it is a big risk for the integrity and security of your system". I have tried this on a second machine too, with the same results. I suppose something's gone awry on the signature of the repo. Reproducible: Always Steps to Reproduce: 1. Start yast as root 2. Select Software -> Repositories 3. Select Add -> FTP Name: nvidia. Location: ftp://download.nvidia.com/opensuse/13.1/ 4. Click on "Trust" when asked whether to import untrusted key. Actual Results: Validation Check Failed. File repomd.xml from repository nvidia ftp://download.nvidia.com/opensuse/13.1/ is signed with the following GnuPG key, but the integrity check failed: ID F5113243C66B6EAE Fingerprint: 9B76 3D49 D8A5 C892 FC17 8BAC F511 3243 C66B 6EAE Name: NVIDIA Corporation Created: 06/15/06 Expires: Never Expected Results: The repo should have been added. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.