#9877 Fedora Labs CHECKSUM file has no GPG signature
Closed: Fixed by mohanboddu. Opened by astra.

  • Describe the issue
    Fedora Labs CHECKSUM file does not have GPG signature attached:
    https://getfedora.org/static/checksums/Fedora-Labs-33-1.2-x86_64-CHECKSUM

According to https://labs.fedoraproject.org/en/verify this should be signed.

  • When do you need this? (YYYY/MM/DD)
    2020/12

  • When is this no longer needed or useful? (YYYY/MM/DD)
    probably not applicable

  • If we cannot complete your request, what is the impact?
    security issue if TLS can be broken for the downloading user.


It seems to be a problem with websites, filed a ticket with them https://pagure.io/fedora-web/websites/issue/163

Closing this ticket now.

Metadata Update from @mohanboddu:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Metadata