Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-24864

yum install fails on GPG check of repomd.xml if content has been modified

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.25.1
    • Fix Version/s: None
    • Component/s: None
    • Notability:
      3

      Description

      When the yum client is configured to require GPG check and the contents of the repomd.xml have been rewritten the GPG check will fail with the following error:

      http://localhost:8081/repository/newrelic/linux/yum/el/7/x86_64/repodata/repomd.xml: [Errno -1] repomd.xml signature could not be verified for newrelic-infra

      This is reproducible using the remote:
      https://download.newrelic.com/infrastructure_agent/

      The repomd.xml on the remote contains sqlite entries which are removed when the repomd.xml is written to the proxy repository. So the two files do not match.

        Attachments

          Issue Links

          is related to

          Improvement - An improvement or enhancement to an existing feature or task. NEXUS-16251 provide option to serve yum gpgkey urls

          • Major - Major loss of function.
          • Closed

            Activity

              People

              Assignee:
              oshiyanbade Olu Shiyanbade
              Reporter:
              cseney Cassandra Seney
              CC:
              Dang Nguyen
              Last Updated By:
              Kam-Wai Lau
              Team:
              NXRM - Operations/Groot
              Votes:
              1 Vote for this issue
              Watchers:
              10 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title