cassandra-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Michael Shuler (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CASSANDRA-13440) Sign RPM artifacts
Date Sat, 15 Apr 2017 00:26:42 GMT

    [ https://issues.apache.org/jira/browse/CASSANDRA-13440?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15969711#comment-15969711
] 

Michael Shuler commented on CASSANDRA-13440:
--------------------------------------------

GPG signature on {{repomd.xml}} must not be sufficient. CentOS7 complained {{Package cassandra-3.0.13-1.noarch.rpm
is not signed}} with gpgcheck enabled. Here's a good non-gpg-check yum config:
{noformat}
[cassandra]
name=Apache Cassandra
baseurl=https://www.apache.org/dist/cassandra/redhat/30x/
gpgcheck=0
gpgkey=https://www.apache.org/dist/cassandra/KEYS
{noformat}

> Sign RPM artifacts
> ------------------
>
>                 Key: CASSANDRA-13440
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-13440
>             Project: Cassandra
>          Issue Type: Sub-task
>          Components: Packaging
>            Reporter: Stefan Podkowinski
>
> RPMs should be gpg signed just as the deb packages. Also add documentation how to verify
to download page.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message