I extracted the signature and looked at it:

```
$ sq packet dump --hex /tmp/blob.pgp 
Unknown or Unsupported Packet, new CTB, 3 header bytes + 284 bytes
    Tag: Signature Packet
    Error: Malformed MPI: leading bit is not set: expected bit 8 to be set in  
1000000 (40)
  
    00000000  c2                                                 CTB
    00000001     c0 5c                                           length
    00000003           04                                        version
    00000004              00                                     type
    00000005                 01                                  pk_algo
    00000006                    08                               hash_algo
    00000007                       00  10                        hashed_area_len
    00000009                              05                     subpacket 
length
    0000000a                                 02                  subpacket tag
    0000000b                                    63 c1 88 71      sig creation 
time
    0000000f                                                09   subpacket 
length
    00000010  10                                                 subpacket tag
    00000011     11 12 0f 47 14 e5 6d  c8                        issuer
    00000019                              00 00                  
unhashed_area_len
    0000001b                                    f6               digest_prefix1
    0000001c                                       50            digest_prefix2
    0000001d                                          08 00 40                
..@
    00000020  7b a4 e3 f0 bc 27 b1 e2  1c f2 1a af e7 0e 67 27   
{....'........g'
    00000030  b2 6d fc 01 df dc 56 f5  1e 53 08 2c 33 7c f3 b1   
.m....V..S.,3|..
    00000040  de 05 b7 55 41 6e 8c b4  82 99 5d 01 8c 74 93 05   
...UAn....]..t..
    00000050  f8 0a 3d aa 23 f2 8c a5  0e 91 d8 32 e2 ae 10 fd   
..=.#......2....
    00000060  33 41 bc 97 dc 21 81 7e  e9 31 9c 27 5c da 81 df   
3A...!.~.1.'\...
    00000070  df 1e 32 ca 61 30 7d b2  28 89 e9 2e 85 c5 4e e4   
..2.a0}.(.....N.
    00000080  df 7d 82 bd bb d6 58 73  a3 3d 44 65 f2 5d 99 34   
.}....Xs.=De.].4
    00000090  2d 24 af 63 ac 64 4d a8  19 62 9a 5d c6 30 5c a5   
-$.c.dM..b.].0\.
    000000a0  80 cb ed 12 a1 7d f8 cb  fc ee fe f1 74 3b 4d 84   
.....}......t;M.
    000000b0  8d 7f 3a af 85 a4 ac 7f  fc 8f a8 f5 ce a7 69 7a   .:..........iz
    000000c0  35 c8 60 c8 0e fd 0d 0a  9b fa d3 77 1d 7a 19 aa   
5.`........w.z..
    000000d0  02 55 6f 32 87 15 d3 b7  14 ba cc 42 51 06 4a fd   
.Uo2.......BQ.J.
    000000e0  f5 40 30 31 1b d8 4d c5  7b a5 00 6b 87 06 ca 1b   
.@01..M.{..k....
    000000f0  61 64 b9 b3 c5 9c 79 f2  a1 59 83 ae e3 2c b2 e0   
ad....y..Y...,..
    00000100  f8 22 cf 3a cb ae 82 48  5d 14 4e f2 f2 19 98 aa   
.".:...H].N.....
    00000110  66 d3 80 63 02 b8 28 f5  45 73 a2 ed 85 79 bd      f..c..(.Es...y.
  
```

The MPIs appear to be malformed, and Sequoia is quite strict in what it 
accepts.  What implementation are you using to sign the rpm?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/2351#issuecomment-1382168455
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/2351/1382168...@github.com>
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint

Reply via email to