Checksum files not signed

The checksum files for Fedora 41 seem not to be signed. Is this coming?

https://download.fedoraproject.org/pub/fedora/linux/releases/41/Cloud/aarch64/images/Fedora-Cloud-41-1.4-aarch64-CHECKSUM

2 Likes

Added f41

The signature in the checksum is missing, and the steps for checking both the signature of the checksum and the checksum of the image are still present on the respective website. E.g., gpgv --keyring ./fedora.gpg Fedora-Workstation-41-1.4-x86_64-CHECKSUM is shown on the Workstation download page. Somewhat alarming to not be able to verify live images with Fedora’s pgp key.

https://download.fedoraproject.org/pub/fedora/linux/releases/41/Workstation/x86_64/iso/Fedora-Workstation-41-1.4-x86_64-CHECKSUM

1 Like
1 Like

Ok, cheers!

The correctly signed checksums should now be on the master mirrors.
They should sync out to others soon.

So sorry for the mixup. ;(

2 Likes

Yep. They are being regenerated right now.

So, you likely will have to redownload the torrent files, but the only
thing that will change in the content is the correctly signed checksum
files will be there.

1 Like