[bisq-network/bisq] Need to press ignore on promt telling me the rpm package is broken due to missing signature. (#3620)

Emil Johansson notifications at github.com
Sat Nov 16 16:27:50 UTC 2019


First of all I really appreciate the work to get Bisq packaged as a rpm :bowing_woman: 

However, adding a signature to the rpm package whould IMHO improve the UX significantly, especially for a project where software integrity is such an important issue.

### Description

On opensuse yast complain about the rpm package being "broken" as it finds no signature. Even though the integrity of the package can be verified using instructions in the release notes a warning is displayed when installing the package

#### Version

1.2.3

### Steps to reproduce

I have imported the GPG key as:
```bash
 curl https://bisq.network/pubkey/29CDFD3B.asc | gpg --import
```

Verifying the rpm download with gpg works
```bash
gpg --digest-algo SHA256 --verify Bisq-64bit-1.2.3.rpm{.asc*,}

gpg: Signature made Thu 07 Nov 2019 03:11:46 PM CET
gpg:                using RSA key CB36D7D2EBB2E35D9B75500BCD5DC1C529CDFD3B
gpg:                issuer "christoph.atteneder at gmail.com"
gpg: Good signature from "Christoph Atteneder <christoph.atteneder at gmail.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: CB36 D7D2 EBB2 E35D 9B75  500B CD5D C1C5 29CD FD3B
```
 
Download the rpm package in opensuse tumbleweed and click 

### Expected behaviour

Expected rmp to be installed by Yast without being reported as broken due to missing signature.

### Actual behaviour

Need to press ignore on promt telling me the rpm package is broken.

### Screenshots
![Screenshot from 2019-11-16 15-10-08](https://user-images.githubusercontent.com/12907343/68995268-01fca680-088c-11ea-8100-784b32cfa902.png)

#### Device or machine

opensuse tumbleweed.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/bisq/issues/3620
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20191116/e1398fb6/attachment.html>


More information about the bisq-github mailing list