<p>First of all I really appreciate the work to get Bisq packaged as a rpm <g-emoji class="g-emoji" alias="bowing_woman" fallback-src="https://github.githubassets.com/images/icons/emoji/unicode/1f647-2640.png">🙇‍♀</g-emoji></p>
<p>However, adding a signature to the rpm package whould IMHO improve the UX significantly, especially for a project where software integrity is such an important issue.</p>
<h3>Description</h3>
<p>On opensuse yast complain about the rpm package being "broken" as it finds no signature. Even though the integrity of the package can be verified using instructions in the release notes a warning is displayed when installing the package</p>
<h4>Version</h4>
<p>1.2.3</p>
<h3>Steps to reproduce</h3>
<p>I have imported the GPG key as:</p>
<div class="highlight highlight-source-shell"><pre> curl https://bisq.network/pubkey/29CDFD3B.asc <span class="pl-k">|</span> gpg --import</pre></div>
<p>Verifying the rpm download with gpg works</p>
<div class="highlight highlight-source-shell"><pre>gpg --digest-algo SHA256 --verify Bisq-64bit-1.2.3.rpm{.asc<span class="pl-k">*</span>,}

gpg: Signature made Thu 07 Nov 2019 03:11:46 PM CET
gpg:                using RSA key CB36D7D2EBB2E35D9B75500BCD5DC1C529CDFD3B
gpg:                issuer <span class="pl-s"><span class="pl-pds">"</span>christoph.atteneder@gmail.com<span class="pl-pds">"</span></span>
gpg: Good signature from <span class="pl-s"><span class="pl-pds">"</span>Christoph Atteneder <christoph.atteneder@gmail.com><span class="pl-pds">"</span></span> [unknown]
gpg: WARNING: This key is not certified with a trusted signature<span class="pl-k">!</span>
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: CB36 D7D2 EBB2 E35D 9B75  500B CD5D C1C5 29CD FD3B</pre></div>
<p>Download the rpm package in opensuse tumbleweed and click</p>
<h3>Expected behaviour</h3>
<p>Expected rmp to be installed by Yast without being reported as broken due to missing signature.</p>
<h3>Actual behaviour</h3>
<p>Need to press ignore on promt telling me the rpm package is broken.</p>
<h3>Screenshots</h3>
<p><a target="_blank" rel="noopener noreferrer" href="https://user-images.githubusercontent.com/12907343/68995268-01fca680-088c-11ea-8100-784b32cfa902.png"><img src="https://user-images.githubusercontent.com/12907343/68995268-01fca680-088c-11ea-8100-784b32cfa902.png" alt="Screenshot from 2019-11-16 15-10-08" style="max-width:100%;"></a></p>
<h4>Device or machine</h4>
<p>opensuse tumbleweed.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/bisq-network/bisq/issues/3620?email_source=notifications&email_token=AJFFTNXIYCMGMJQBVK7YLSLQUANQNA5CNFSM4JOF3H2KYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4HZZRRRA">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AJFFTNROYSE6OVIRFLMW6ELQUANQNANCNFSM4JOF3H2A">unsubscribe</a>.<img src="https://github.com/notifications/beacon/AJFFTNXLRD6KALZFP5MZSXTQUANQNA5CNFSM4JOF3H2KYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4HZZRRRA.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/bisq-network/bisq/issues/3620?email_source=notifications\u0026email_token=AJFFTNXIYCMGMJQBVK7YLSLQUANQNA5CNFSM4JOF3H2KYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4HZZRRRA",
"url": "https://github.com/bisq-network/bisq/issues/3620?email_source=notifications\u0026email_token=AJFFTNXIYCMGMJQBVK7YLSLQUANQNA5CNFSM4JOF3H2KYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4HZZRRRA",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>