On 11/27/25 12:46 AM, Stephen Morris wrote:
Why isn't the upstream provider signing their rpms?  If they are, you need to import their key.

The software supply does have a key for their repository which I have imported with rpmkey but it makes no difference to the issue, the dnf install/reinstall still fails with a nodigest error.

I can reproduce the issue.

# rpmkeys --list
cc7d2edf4808effa0e00fc723413da98aa3e7f5e SoftMaker repository (GPG key for signing files) <[email protected]> public key c6e7f081cf80e13146676e88829b606631645531 Fedora (43) <[email protected]> public key

# rpm --checksig vim-enhanced-9.1.1914-1.fc43.x86_64.rpm
vim-enhanced-9.1.1914-1.fc43.x86_64.rpm: digests signatures OK

# rpm --checksig softmaker-office-nx-1228.x86_64.rpm
softmaker-office-nx-1228.x86_64.rpm: DIGESTS signatures NOT OK

The weird thing is that the softmaker rpm appears to be signed twice with the same key.

# rpm -qip vim-enhanced-9.1.1914-1.fc43.x86_64.rpm
Signature   :
RSA/SHA256, Fri 14 Nov 2025 10:25:40 AM UTC, Key ID 829b606631645531

# rpm -qip softmaker-office-nx-1228.x86_64.rpm
Signature   :
RSA/SHA256, Sat 06 Sep 2025 05:00:35 AM UTC, Key ID 3413da98aa3e7f5e RSA/SHA256, Sat 06 Sep 2025 05:00:34 AM UTC, Key ID 3413da98aa3e7f5e

That might cause a problem.

--
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to