https://bugzilla.suse.com/show_bug.cgi?id=1228542 Bug ID: 1228542 Summary: Wrong GPG key in repository Classification: openSUSE Product: openSUSE Leap Micro Version: 6.0 Hardware: Other OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: Base Assignee: screening-team-bugs@suse.de Reporter: mc@suse.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- http://download.opensuse.org/distribution/leap-micro/6.0/product/repo/Leap-M... has a wrong GPG key in the metadata directory. repodata/repomd.xml.key is not the key which signed this repository minima-mirror-ci-bv:/srv/mirror/distribution/leap-micro/6.0/product/repo/Leap-Micro-6.0-x86_64-Media1-in-progress/repodata # gpg --keyid-format=long --verify repomd.xml.asc gpg: die unterzeichneten Daten sind wohl in 'repomd.xml' gpg: Signatur vom Fr 26 Jul 2024 01:48:05 CEST gpg: mittels RSA-Schlüssel 35A2F86E29B700A4 gpg: Signatur kann nicht geprüft werden: Kein öffentlicher Schlüssel minima-mirror-ci-bv:/srv/mirror/distribution/leap-micro/6.0/product/repo/Leap-Micro-6.0-x86_64-Media1-in-progress/repodata # gpg --keyid-format=long repomd.xml.key gpg: WARNING: Kein Kommando angegeben. Versuche zu raten was gemeint ist ... pub rsa2048/B88B2FD43DBDC284 2008-11-07 [SC] [verfallen: 2024-05-02] 22C07BA534178CD02EFE22AAB88B2FD43DBDC284 uid openSUSE Project Signing Key <opensuse@opensuse.org> 0x35A2F86E29B700A4 vs 0xB88B2FD43DBDC284 -- You are receiving this mail because: You are on the CC list for the bug.