Package apr15u-1.5.2-2.ius.el7.x86_64 does not verify: no digest

Hi All,

I’m from the Artifactory Team. We usually validate with Fedora images to ensure compliance with the latest changes, and I’ve observed an issue recently.

Test Case:

The test case will install a package from https://vault.ius.io/el7/x86_64/ remote registry to ensure Artifactory is able to install packages from remote repo whose repodata has primary.xml.gz file. we are trying to install apr15u-0:1.5.2-2.ius.el7.x86_64 package from this remote registry using artifactory

Contents of artifactory.repo File:

[root@c28134b58db8 /]# cat /etc/yum.repos.d/artifactory.repo
[Artifactory-Local]
name=Artifactory-Local
baseurl=https://admin:<admin token>@pit59xl5iy.jfrogdev.org/artifactory/yum-remote-x8u9vuj9va
enabled=1
gpgcheck=0
gpgkey=file:///etc/yum.repos.d/keys/public.key
group=MyGroup

Testing on Fedora 42 Image:

I pulled the Fedora 42 image from docker using docker run -it --platform=linux/amd64 fedora:42 /bin/bash and configured it with the above artifactory.repo configuration.

[root@c28134b58db8 /]# yum install -y apr15u
Updating and loading repositories:
 Artifactory-Local                                                                                                                                                                                                                      100% |   1.3 MiB/s |   1.5 MiB |  00m01s
Repositories loaded.
Package                                                                                       Arch                Version                                                                                       Repository                                                  Size
Installing:
 apr15u                                                                                       x86_64              1.5.2-2.ius.el7                                                                               Artifactory-Local                                      240.3 KiB

Transaction Summary:
 Installing:         1 package

Total size of inbound packages is 112 KiB. Need to download 112 KiB.
After this operation, 240 KiB extra will be used (install 240 KiB, remove 0 B).
[1/1] apr15u-0:1.5.2-2.ius.el7.x86_64                                                                                                                                                                                                   100% | 349.4 KiB/s | 111.8 KiB |  00m00s
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[1/1] Total                                                                                                                                                                                                                             100% | 344.0 KiB/s | 111.8 KiB |  00m00s
Running transaction
[1/3] Verify package files                                                                                                                                                                                                              100% |   0.0   B/s |   1.0   B |  00m00s
[2/3] Prepare transaction                                                                                                                                                                                                               100% | 142.0   B/s |   1.0   B |  00m00s
[3/3] Installing apr15u-0:1.5.2-2.ius.el7.x86_64                                                                                                                                                                                        100% |   2.2 MiB/s | 241.3 KiB |  00m00s
Warning: skipped OpenPGP checks for 1 package from repository: Artifactory-Local
Complete!
[root@c28134b58db8 /]#
[root@c28134b58db8 /]#
[root@c28134b58db8 /]# cat /etc/yum.repos.d/artifactory.repo
[Artifactory-Local]
name=Artifactory-Local
baseurl=https://admin:cmVmdGtuOjAxOjE3OTY0NTUzNDY6VnZGNDk3MktjUmhlbkF4eE5OUE1BemVKYkdj@pit59xl5iy.jfrogdev.org/artifactory/yum-remote-x8u9vuj9va
enabled=1
gpgcheck=0
gpgkey=file:///etc/yum.repos.d/keys/public.key
group=MyGroup
[root@c28134b58db8 /]#

Testing on Fedora Latest Image:

I tried the same steps in the Fedora latest container created using `docker run --platform=linux/amd64 -it fedora:latest /bin/bash` with the same artifactory.repo configuration. Installation was successful, but the upgrade failed with a ‘no digest’ error.

[root@44bd8bd852c6 libdnf5]# yum install -y apr15u
Updating and loading repositories:
 Artifactory-Local                                                                                                                                                                                                                      100% |   1.2 MiB/s |   1.5 MiB |  00m01s
Repositories loaded.
Package                                                                                       Arch                Version                                                                                       Repository                                                  Size
Installing:
 apr15u                                                                                       x86_64              1.5.2-2.ius.el7                                                                               Artifactory-Local                                      240.3 KiB

Transaction Summary:
 Installing:         1 package

Total size of inbound packages is 112 KiB. Need to download 112 KiB.
After this operation, 240 KiB extra will be used (install 240 KiB, remove 0 B).
[1/1] apr15u-0:1.5.2-2.ius.el7.x86_64                                                                                                                                                                                                   100% | 298.9 KiB/s | 111.8 KiB |  00m00s
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[1/1] Total                                                                                                                                                                                                                             100% | 294.2 KiB/s | 111.8 KiB |  00m00s
Running transaction
Transaction failed: Rpm transaction failed.
Warning: skipped OpenPGP checks for 1 package from repository: Artifactory-Local
  - package apr15u-1.5.2-2.ius.el7.x86_64 does not verify: no digest
[root@44bd8bd852c6 libdnf5]#
[root@44bd8bd852c6 libdnf5]#
[root@44bd8bd852c6 libdnf5]# cat /etc/yum.repos.d/artifactory.repo
[Artifactory-Local]
name=Artifactory-Local
baseurl=https://admin:cmVmdGtuOjAxOjE3OTY0NTUzNDY6VnZGNDk3MktjUmhlbkF4eE5OUE1BemVKYkdj@pit59xl5iy.jfrogdev.org/artifactory/yum-remote-x8u9vuj9va
enabled=1
gpgcheck=0
gpgkey=file:///etc/yum.repos.d/keys/public.key
group=MyGroup

It is able to pull the package but failing with `Running transaction
Transaction failed: Rpm transaction failed.
Warning: skipped OpenPGP checks for 1 package from repository: Artifactory-Local

  • package apr15u-1.5.2-2.ius.el7.x86_64 does not verify: no digest` error during installation.

Please advise on how to fix this issue.

Sublime-Text not able to install in Fedora 43 - #12 by vgaetera

@vgaetera is this issue specific to package or something changed in the latest client that we need to support this from Artifactory side?

This should be a side effect of that change:
Changes/RPM-6.0 - Fedora Project Wiki

Thanks @vgaetera

1 Like

I have seen a number of posts tagged as “solution” which only say the old crypto support was removed.

Is Fedora seriously expecting users to go back to direct rpm -i or just be stuck not being able to install software?

DNF provides a --no-gpgchecks option why was a similar option not provided for this major crypto change for compatibility sake?

If you are unhappy, this is what you can do: