Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-26620

mongodb-org-*-3.2.10 rpms are unsigned

XMLWordPrintableJSON

    • Type: Icon: Bug Bug
    • Resolution: Done
    • Priority: Icon: Minor - P4 Minor - P4
    • None
    • Affects Version/s: 3.2.10
    • Component/s: Packaging
    • None
    • Fully Compatible
    • ALL
    • Hide

      from a centos 7 machine:
      1. yum install mongodb-org-server-3.2.10
      2. see the message "Package mongodb-org-tools-3.2.10-1.el7.x86_64.rpm is not signed"

      Show
      from a centos 7 machine: 1. yum install mongodb-org-server-3.2.10 2. see the message " Package mongodb-org-tools-3.2.10-1.el7.x86_64.rpm is not signed "
    • Evergreen 2016-10-31

      The rpms for mongodb-org-server-3.2.10 and mongodb-org-tools-3.2.10 available from https://repo.mongodb.org/yum/redhat/$releasever/mongodb-org/3.2/x86_64/ for for centos7 (el7, I think is the $releasever) are not signed. Perhaps the other packages as well, I did not check.

      The easy workaround is to add --nocheckgpg to the yum command, but that's insecure. Paranoia! Run!

            Assignee:
            sam.kleinman Sam Kleinman (Inactive)
            Reporter:
            dwlocks Dan Locks
            Votes:
            2 Vote for this issue
            Watchers:
            9 Start watching this issue

              Created:
              Updated:
              Resolved: