You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@cassandra.apache.org by "Michael Shuler (JIRA)" <ji...@apache.org> on 2017/04/15 00:26:42 UTC

[jira] [Commented] (CASSANDRA-13440) Sign RPM artifacts

    [ https://issues.apache.org/jira/browse/CASSANDRA-13440?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15969711#comment-15969711 ] 

Michael Shuler commented on CASSANDRA-13440:
--------------------------------------------

GPG signature on {{repomd.xml}} must not be sufficient. CentOS7 complained {{Package cassandra-3.0.13-1.noarch.rpm is not signed}} with gpgcheck enabled. Here's a good non-gpg-check yum config:
{noformat}
[cassandra]
name=Apache Cassandra
baseurl=https://www.apache.org/dist/cassandra/redhat/30x/
gpgcheck=0
gpgkey=https://www.apache.org/dist/cassandra/KEYS
{noformat}

> Sign RPM artifacts
> ------------------
>
>                 Key: CASSANDRA-13440
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-13440
>             Project: Cassandra
>          Issue Type: Sub-task
>          Components: Packaging
>            Reporter: Stefan Podkowinski
>
> RPMs should be gpg signed just as the deb packages. Also add documentation how to verify to download page.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)