I just got this strange and somewhat disturbing message from dnf after doing a large upgrade:
Bad GPG signature found:
/var/cache/PackageKit/42/metadata/weewx-42-x86_64/packages/weewx-5.2.0-1.el8.noarch.rpm could not be verified.
/var/cache/PackageKit/42/metadata/weewx-42-x86_64/packages/weewx-5.2.0-1.el8.noarch.rpm: digest: SIGNATURE: NOT OK
What needs to be done? How should I investigate? How worried should I be?
I run weewx on two system:
- a production system which I run remotely via ssh and uprgrade using dnf console interface. I couldn't find any errors in the dnf log or the system log (journalctl) for this system
- a test system, which I administer directly and upgrade using the discover gui. The error message showed up on this system after an upgrade using discover. I have stopped weewx on this system.
--
Sincerely Jonathan Ryshpan <jon...@pacbell.net>
Despite the high cost of living, have you noticed how
popular it remains? -- Dean Brown