Re: Prebuilt RHEL/CentOS/Oracle 9 for AMD64 signatures do not match in the prebuilt packages download page

On Mon, 05 Aug 2024 14:32:36 -0700, Scott Haiden via sudo-users wrote:

> I was looking to download the prebuilt RPMs from the website (
> https://www.sudo.ws/getting/packages/) and it seems that all of the amd64
> builds for RHEL9 and friends had mismatching sha256sums, and they have no
> GPG signatures, despite the page saying the RPMs should be signed with two
> GPG keys.

I rebuilt the RHEL9 amd64 packages on Rocky 9.1 and forgot to update
the sha256sums on the web page.  The sums in the SHA256 file in the
dist directory were still correct.  I've updated the sha256sums on
the web page to match.

As for the signatures, it looks like gpg signing got broken when
the build server was moved to a new system.  I'll take a look at
fixing that.

 - todd
____________________________________________________________
sudo-users mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users