keybase / keybase/keybase-issues
openSUSE repomd.xml not signed
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
When attempting to add `http://prerelease.keybase.io/rpm/$basearch` as a repo on openSUSE, it reports that `repomd.xml` is not digitally signed.
If the repo is added anyway, the `https://keybase.io/docs/server_security/code_signing_key.asc` key is imported, and `run_keybase` is ran afterwards, Keybase seems to start-up and run fine on oS Tumbleweed (can log-in and manage files with the DE's file manager).
Contributor guide
No contributing guide indexed for this repository
Research direction
Reproduce the repository setup on openSUSE Tumbleweed using the prerelease.keybase.io RPM source and inspect how its repomd.xml is signed. Compare the repository metadata with the code-signing key at keybase.io/docs/server_security/code_signing_key.asc; done when the repository verifies without bypassing signature checks.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux
- Domain
- release
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100