On 2025-11-19 Andreas Metzler <[email protected]> wrote:
[...]

> Upstream GIT head also fails with this error.

Hello,

The build error was fixed upstream in
488b7d2fc92e547c4ee1448694614cc1f4afaff7 - Unfuzzed patch for 17.37.17
attached.

It throws a testsuite error, though.

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'
Description: cmake: correctly detect rpm6 (fixes #689)
 Backported from master 488b7d2fc92e547c4ee1448694614cc1f4afaff7
 to 17.37.17
Author: Michael Andres <[email protected]>
Bug: https://github.com/openSUSE/libzypp/issues/689
Bug-Debian: https://bugs.debian.org/1120826
Origin: upstream
Last-Update: 2025-11-19

--- libzypp-17.37.17.orig/tools/zypp-rpm/CMakeLists.txt
+++ libzypp-17.37.17/tools/zypp-rpm/CMakeLists.txt
@@ -17,8 +17,8 @@ ELSE ( NOT RPM_FOUND)
     ADD_DEFINITIONS( -DHAVE_RPM_VERIFY_TRANSACTION_STEP )
   endif()
 
-  if( RPM_LIB_VER VERSION_GREATER_EQUAL "5.0.0" )
-        MESSAGE( STATUS "rpm found: enable rpm-4 compat interface." )
+  if( RPM_LIB_VER VERSION_GREATER_EQUAL "5.0.0" AND RPM_LIB_VER VERSION_LESS "6.0.0" )
+        MESSAGE( STATUS "rpm5 found: enable rpm-4 compat interface." )
         ADD_DEFINITIONS(-D_RPM_5)
   endif ()
 ENDIF( NOT RPM_FOUND)
--- libzypp-17.37.17.orig/zypp/CMakeLists.txt
+++ libzypp-17.37.17/zypp/CMakeLists.txt
@@ -1040,12 +1040,12 @@ target_include_directories( zypp-objlib
 target_include_directories( zypp-objlib PUBLIC ${RPM_INCLUDE_DIR}/rpm)
 
 # rpm verify function and callback states were introduced in rpm-4.15
-if( RPM_LIB_VER VERSION_GREATER_EQUAL "4.15.0"  AND  RPM_LIB_VER VERSION_LESS "5.0.0")
+if( ( RPM_LIB_VER VERSION_GREATER_EQUAL "4.15.0"  AND  RPM_LIB_VER VERSION_LESS "5.0.0") OR RPM_LIB_VER VERSION_GREATER_EQUAL "6.0.0" )
   target_compile_definitions( zypp-objlib PUBLIC HAVE_RPM_VERIFY_TRANSACTION_STEP )
 endif()
 
-if( RPM_LIB_VER VERSION_GREATER_EQUAL "5.0.0" )
-      MESSAGE( STATUS "rpm found: enable rpm-4 compat interface." )
+if( RPM_LIB_VER VERSION_GREATER_EQUAL "5.0.0" AND RPM_LIB_VER VERSION_LESS "6.0.0" )
+      MESSAGE( STATUS "rpm5 found: enable rpm-4 compat interface." )
       target_compile_definitions( zypp-objlib PUBLIC _RPM_5)
 endif ()
 
      Start 41: RpmPkgSigCheck_test

41: Test command: 
/var/tmp/libzypp-17.37.17/obj-x86_64-linux-gnu/tests/zypp/RpmPkgSigCheck_test 
"--catch_system_errors=no"
41: Working Directory: /var/tmp/libzypp-17.37.17/obj-x86_64-linux-gnu/tests/zypp
41: Test timeout computed to be: 1500
30: ****002****
30: 
30: ****003****
30: ****004****
30: ****005.1****
30: ****005.2****
30: ****005.3****
30: ****006.1***
30: ****006.2***
30: ****006.3***
30: ****007***
30: ****050****
30: 
30: ****100****
30: 
30: ****101****
30: 
30: ****102****
30: ****103.1****
30: ****103.2****
30: 
30: ****104****
30: ****105****
30: ****300****
30: ****301****
30: ****302****
30: ****400****
30: ****401****
30: ****500.1****
30: ****500.2****
30: ****500.3****
30: ****500.4****
30: ****500.5****
30: ****501****
41: Running 11 test cases...
41: ./tests/zypp/RpmPkgSigCheck_test.cc(124): error: in 
"unsigned_pkg": check xpct == cs has failed [R: [6-File is unsigned]
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Payload SHA256 digest: OK
41:    [0-Signature is OK] |     MD5 digest: OK
41:    [6-File is unsigned] |     Package header is not signed! != R: [6-File 
is unsigned]
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Payload SHA256 digest: OK
41:    [0-Signature is OK] |     Legacy MD5 digest: OK
41:    [6-File is unsigned] |     Package header is not signed!]
41: ./tests/zypp/RpmPkgSigCheck_test.cc(141): error: in 
"unsigned_broken_pkg": check xpct == cs has failed [R: [2-Signature does not 
verify]
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [2-Signature does not verify] |     MD5 digest: BAD (Expected 
e3f474f75d2d2b267da4ff80fc071dd7 != cebe1e7d39b4356639a0779aa23f6e27) != R: 
[2-Signature does not verify]
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
e3f474f75d2d2b267da4ff80fc071dd7 != cebe1e7d39b4356639a0779aa23f6e27)]
41: ./tests/zypp/RpmPkgSigCheck_test.cc(158): error: in 
"unsigned_broken_header_pkg": check xpct == cs has failed [R: [2-Signature does 
not verify]
41:    [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
d6768447e13388b0c35fb151ebfa8f6646a115e9 != 
dd761ace671a5eb2669b269faf22a3cd72792138)
41:    [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
2ce9f41bc0de68b4cb1aa1e18c1bea43dfaa01299ae61ef3e4466df332c792e5 != 
4a9410db7131cead773afe1876f2490023ccc7dc47cbba47807430c53ea9649d)
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [2-Signature does not verify] |     MD5 digest: BAD (Expected 
e3f474f75d2d2b267da4ff80fc071dd7 != 9afd6b52896d23910280ddded1921071) != R: 
[2-Signature does not verify]
41:    [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
2ce9f41bc0de68b4cb1aa1e18c1bea43dfaa01299ae61ef3e4466df332c792e5 != 
4a9410db7131cead773afe1876f2490023ccc7dc47cbba47807430c53ea9649d)
41:    [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
d6768447e13388b0c35fb151ebfa8f6646a115e9 != 
dd761ace671a5eb2669b269faf22a3cd72792138)
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
e3f474f75d2d2b267da4ff80fc071dd7 != 9afd6b52896d23910280ddded1921071)]
41: ./tests/zypp/RpmPkgSigCheck_test.cc(176): error: in 
"signed_pkg_nokey": check xpct == cs has failed [R: [4-Signatures public key is 
not available]
41:    [4-Signatures public key is not available] |     Header V4 RSA/SHA256 
Signature, key ID e279209bbb65a216: NOKEY
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Payload SHA256 digest: OK
41:    [0-Signature is OK] |     MD5 digest: OK
41:    [4-Signatures public key is not available] |     V4 RSA/SHA256 
Signature, key ID e279209bbb65a216: NOKEY != R: [5-File does not exist or 
signature can't be checked]
41:    [5-File does not exist or signature can't be checked] |     Header 
OpenPGP V4 RSA/SHA256 signature, key ID e279209bbb65a216: NOKEY
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Payload SHA256 digest: OK
41:    [5-File does not exist or signature can't be checked] |     Legacy 
OpenPGP V4 RSA/SHA256 signature, key ID e279209bbb65a216: NOKEY
41:    [0-Signature is OK] |     Legacy MD5 digest: OK]
41: ./tests/zypp/RpmPkgSigCheck_test.cc(194): error: in 
"signed_broken_pkg_nokey": check xpct == cs has failed [R: [2-Signature does 
not verify]
41:    [4-Signatures public key is not available] |     Header V4 RSA/SHA256 
Signature, key ID e279209bbb65a216: NOKEY
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [2-Signature does not verify] |     MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)
41:    [2-Signature does not verify] |     V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD != R: [2-Signature does not verify]
41:    [5-File does not exist or signature can't be checked] |     Header 
OpenPGP V4 RSA/SHA256 signature, key ID e279209bbb65a216: NOKEY
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [5-File does not exist or signature can't be checked] |     Legacy 
OpenPGP V4 RSA/SHA256 signature, key ID e279209bbb65a216: BAD
41:    [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)]
41: ./tests/zypp/RpmPkgSigCheck_test.cc(212): error: in 
"signed_broken_header_pkg_nokey": check xpct == cs has failed [R: [2-Signature 
does not verify]
41:    [2-Signature does not verify] |     Header V4 RSA/SHA256 Signature, key 
ID e279209bbb65a216: BAD
41:    [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
9ca2e0aec038e562d33442271ee52c08ded0d637 != 
9ca2e3aec038e562d33442271ee52c08ded0d637)
41:    [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
e8810065608e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732 != 
e88100656c8e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732)
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [2-Signature does not verify] |     MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)
41:    [2-Signature does not verify] |     V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD != R: [2-Signature does not verify]
41:    [5-File does not exist or signature can't be checked] |     Header 
OpenPGP V4 RSA/SHA256 signature, key ID e279209bbb65a216: BAD
41:    [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
e8810065608e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732 != 
e88100656c8e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732)
41:    [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
9ca2e0aec038e562d33442271ee52c08ded0d637 != 
9ca2e3aec038e562d33442271ee52c08ded0d637)
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [5-File does not exist or signature can't be checked] |     Legacy 
OpenPGP V4 RSA/SHA256 signature, key ID e279209bbb65a216: BAD
41:    [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)]
30: ****502****
30: ****600.1****
30: ****600.2****
30: ****600.3****
30: ****600.4****
30: ****601.****
30: ****X****
30: ****recovery****
30: ****predicated_matcher****
30: ****serialize****
30: ****equal****
30: ****addDependency1****
30: ****addDependency2****
30: ****addDependency2a****
41: ./tests/zypp/RpmPkgSigCheck_test.cc(230): error: in 
"signed_pkg_withkey": check cp == cs has failed [R: [0-Signature is OK]
41:    [5-File does not exist or signature can't be checked] |     Header 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Payload SHA256 digest: OK
41:    [5-File does not exist or signature can't be checked] |     Legacy 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
41:    [0-Signature is OK] |     Legacy MD5 digest: OK
41:    [6-File is unsigned] |     Package header is not signed! != R: [6-File 
is unsigned]
41:    [5-File does not exist or signature can't be checked] |     Header 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Payload SHA256 digest: OK
41:    [5-File does not exist or signature can't be checked] |     Legacy 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
41:    [0-Signature is OK] |     Legacy MD5 digest: OK
41:    [6-File is unsigned] |     Package header is not signed!]
41: ./tests/zypp/RpmPkgSigCheck_test.cc(240): error: in 
"signed_pkg_withkey": check xpct == cs has failed [R: [0-Signature is OK]
41:    [0-Signature is OK] |     Header V4 RSA/SHA256 Signature, key ID 
bb65a216: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Payload SHA256 digest: OK
41:    [0-Signature is OK] |     MD5 digest: OK
41:    [0-Signature is OK] |     V4 RSA/SHA256 Signature, key ID bb65a216: OK 
!= R: [6-File is unsigned]
41:    [5-File does not exist or signature can't be checked] |     Header 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Payload SHA256 digest: OK
41:    [5-File does not exist or signature can't be checked] |     Legacy 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
41:    [0-Signature is OK] |     Legacy MD5 digest: OK
41:    [6-File is unsigned] |     Package header is not signed!]
41: ./tests/zypp/RpmPkgSigCheck_test.cc(258): error: in 
"signed_broken_pkg_withkey": check xpct == cs has failed [R: [2-Signature does 
not verify]
41:    [0-Signature is OK] |     Header V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [2-Signature does not verify] |     MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)
41:    [2-Signature does not verify] |     V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD != R: [2-Signature does not verify]
41:    [5-File does not exist or signature can't be checked] |     Header 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
41:    [0-Signature is OK] |     Header SHA256 digest: OK
41:    [0-Signature is OK] |     Header SHA1 digest: OK
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [5-File does not exist or signature can't be checked] |     Legacy 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: BAD
41:    [5-File does not exist or signature can't be checked] |     Legacy 
OpenPGP DSA signature: NOTFOUND
41:    [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)]
41: ./tests/zypp/RpmPkgSigCheck_test.cc(276): error: in 
"signed_broken_header_pkg_withkey": check xpct == cs has failed [R: 
[2-Signature does not verify]
30: ****addDependency2b****
41:    [2-Signature does not verify] |     Header V4 RSA/SHA256 Signature, key 
ID e279209bbb65a216: BAD
41:    [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
9ca2e0aec038e562d33442271ee52c08ded0d637 != 
9ca2e3aec038e562d33442271ee52c08ded0d637)
41:    [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
e8810065608e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732 != 
e88100656c8e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732)
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [2-Signature does not verify] |     MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)
41:    [2-Signature does not verify] |     V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD != R: [2-Signature does not verify]
41:    [5-File does not exist or signature can't be checked] |     Header 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: BAD
41:    [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
e8810065608e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732 != 
e88100656c8e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732)
41:    [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
9ca2e0aec038e562d33442271ee52c08ded0d637 != 
9ca2e3aec038e562d33442271ee52c08ded0d637)
41:    [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
41:    [5-File does not exist or signature can't be checked] |     Legacy 
OpenPGP V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: BAD
41:    [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)]
41: 
41: *** 10 failures are detected in the test module "Master Test 
Suite"
41: 
30: ****addDependency2c****
36/90 Test #41: RpmPkgSigCheck_test ..............***Failed    0.42 sec
Running 11 test cases...
./tests/zypp/RpmPkgSigCheck_test.cc(124): error: in "unsigned_pkg": 
check xpct == cs has failed [R: [6-File is unsigned]
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Payload SHA256 digest: OK
   [0-Signature is OK] |     MD5 digest: OK
   [6-File is unsigned] |     Package header is not signed! != R: [6-File is 
unsigned]
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Payload SHA256 digest: OK
   [0-Signature is OK] |     Legacy MD5 digest: OK
   [6-File is unsigned] |     Package header is not signed!]
./tests/zypp/RpmPkgSigCheck_test.cc(141): error: in 
"unsigned_broken_pkg": check xpct == cs has failed [R: [2-Signature does not 
verify]
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [2-Signature does not verify] |     MD5 digest: BAD (Expected 
e3f474f75d2d2b267da4ff80fc071dd7 != cebe1e7d39b4356639a0779aa23f6e27) != R: 
[2-Signature does not verify]
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
e3f474f75d2d2b267da4ff80fc071dd7 != cebe1e7d39b4356639a0779aa23f6e27)]
./tests/zypp/RpmPkgSigCheck_test.cc(158): error: in 
"unsigned_broken_header_pkg": check xpct == cs has failed [R: [2-Signature does 
not verify]
   [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
d6768447e13388b0c35fb151ebfa8f6646a115e9 != 
dd761ace671a5eb2669b269faf22a3cd72792138)
   [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
2ce9f41bc0de68b4cb1aa1e18c1bea43dfaa01299ae61ef3e4466df332c792e5 != 
4a9410db7131cead773afe1876f2490023ccc7dc47cbba47807430c53ea9649d)
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [2-Signature does not verify] |     MD5 digest: BAD (Expected 
e3f474f75d2d2b267da4ff80fc071dd7 != 9afd6b52896d23910280ddded1921071) != R: 
[2-Signature does not verify]
   [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
2ce9f41bc0de68b4cb1aa1e18c1bea43dfaa01299ae61ef3e4466df332c792e5 != 
4a9410db7131cead773afe1876f2490023ccc7dc47cbba47807430c53ea9649d)
   [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
d6768447e13388b0c35fb151ebfa8f6646a115e9 != 
dd761ace671a5eb2669b269faf22a3cd72792138)
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
e3f474f75d2d2b267da4ff80fc071dd7 != 9afd6b52896d23910280ddded1921071)]
./tests/zypp/RpmPkgSigCheck_test.cc(176): error: in 
"signed_pkg_nokey": check xpct == cs has failed [R: [4-Signatures public key is 
not available]
   [4-Signatures public key is not available] |     Header V4 RSA/SHA256 
Signature, key ID e279209bbb65a216: NOKEY
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Payload SHA256 digest: OK
   [0-Signature is OK] |     MD5 digest: OK
   [4-Signatures public key is not available] |     V4 RSA/SHA256 Signature, 
key ID e279209bbb65a216: NOKEY != R: [5-File does not exist or signature can't 
be checked]
   [5-File does not exist or signature can't be checked] |     Header OpenPGP 
V4 RSA/SHA256 signature, key ID e279209bbb65a216: NOKEY
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Payload SHA256 digest: OK
   [5-File does not exist or signature can't be checked] |     Legacy OpenPGP 
V4 RSA/SHA256 signature, key ID e279209bbb65a216: NOKEY
   [0-Signature is OK] |     Legacy MD5 digest: OK]
./tests/zypp/RpmPkgSigCheck_test.cc(194): error: in 
"signed_broken_pkg_nokey": check xpct == cs has failed [R: [2-Signature does 
not verify]
   [4-Signatures public key is not available] |     Header V4 RSA/SHA256 
Signature, key ID e279209bbb65a216: NOKEY
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [2-Signature does not verify] |     MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)
   [2-Signature does not verify] |     V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD != R: [2-Signature does not verify]
   [5-File does not exist or signature can't be checked] |     Header OpenPGP 
V4 RSA/SHA256 signature, key ID e279209bbb65a216: NOKEY
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [5-File does not exist or signature can't be checked] |     Legacy OpenPGP 
V4 RSA/SHA256 signature, key ID e279209bbb65a216: BAD
   [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)]
./tests/zypp/RpmPkgSigCheck_test.cc(212): error: in 
"signed_broken_header_pkg_nokey": check xpct == cs has failed [R: [2-Signature 
does not verify]
   [2-Signature does not verify] |     Header V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD
   [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
9ca2e0aec038e562d33442271ee52c08ded0d637 != 
9ca2e3aec038e562d33442271ee52c08ded0d637)
   [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
e8810065608e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732 != 
e88100656c8e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732)
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [2-Signature does not verify] |     MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)
   [2-Signature does not verify] |     V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD != R: [2-Signature does not verify]
   [5-File does not exist or signature can't be checked] |     Header OpenPGP 
V4 RSA/SHA256 signature, key ID e279209bbb65a216: BAD
   [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
e8810065608e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732 != 
e88100656c8e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732)
   [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
9ca2e0aec038e562d33442271ee52c08ded0d637 != 
9ca2e3aec038e562d33442271ee52c08ded0d637)
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [5-File does not exist or signature can't be checked] |     Legacy OpenPGP 
V4 RSA/SHA256 signature, key ID e279209bbb65a216: BAD
   [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)]
./tests/zypp/RpmPkgSigCheck_test.cc(230): error: in 
"signed_pkg_withkey": check cp == cs has failed [R: [0-Signature is OK]
   [5-File does not exist or signature can't be checked] |     Header OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Payload SHA256 digest: OK
   [5-File does not exist or signature can't be checked] |     Legacy OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
   [0-Signature is OK] |     Legacy MD5 digest: OK
   [6-File is unsigned] |     Package header is not signed! != R: [6-File is 
unsigned]
   [5-File does not exist or signature can't be checked] |     Header OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Payload SHA256 digest: OK
   [5-File does not exist or signature can't be checked] |     Legacy OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
   [0-Signature is OK] |     Legacy MD5 digest: OK
   [6-File is unsigned] |     Package header is not signed!]
./tests/zypp/RpmPkgSigCheck_test.cc(240): error: in 
"signed_pkg_withkey": check xpct == cs has failed [R: [0-Signature is OK]
   [0-Signature is OK] |     Header V4 RSA/SHA256 Signature, key ID bb65a216: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Payload SHA256 digest: OK
   [0-Signature is OK] |     MD5 digest: OK
   [0-Signature is OK] |     V4 RSA/SHA256 Signature, key ID bb65a216: OK != R: 
[6-File is unsigned]
   [5-File does not exist or signature can't be checked] |     Header OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Payload SHA256 digest: OK
   [5-File does not exist or signature can't be checked] |     Legacy OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
   [0-Signature is OK] |     Legacy MD5 digest: OK
   [6-File is unsigned] |     Package header is not signed!]
./tests/zypp/RpmPkgSigCheck_test.cc(258): error: in 
"signed_broken_pkg_withkey": check xpct == cs has failed [R: [2-Signature does 
not verify]
   [0-Signature is OK] |     Header V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [2-Signature does not verify] |     MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)
   [2-Signature does not verify] |     V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD != R: [2-Signature does not verify]
   [5-File does not exist or signature can't be checked] |     Header OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: OK
   [0-Signature is OK] |     Header SHA256 digest: OK
   [0-Signature is OK] |     Header SHA1 digest: OK
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [5-File does not exist or signature can't be checked] |     Legacy OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: BAD
   [5-File does not exist or signature can't be checked] |     Legacy OpenPGP 
DSA signature: NOTFOUND
   [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)]
./tests/zypp/RpmPkgSigCheck_test.cc(276): error: in 
"signed_broken_header_pkg_withkey": check xpct == cs has failed [R: 
[2-Signature does not verify]
   [2-Signature does not verify] |     Header V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD
   [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
9ca2e0aec038e562d33442271ee52c08ded0d637 != 
9ca2e3aec038e562d33442271ee52c08ded0d637)
   [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
e8810065608e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732 != 
e88100656c8e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732)
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [2-Signature does not verify] |     MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)
   [2-Signature does not verify] |     V4 RSA/SHA256 Signature, key ID 
e279209bbb65a216: BAD != R: [2-Signature does not verify]
   [5-File does not exist or signature can't be checked] |     Header OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: BAD
   [2-Signature does not verify] |     Header SHA256 digest: BAD (Expected 
e8810065608e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732 != 
e88100656c8e06b6e4bb9155f0dd111ef8042866941f02b623cb46e12a82f732)
   [2-Signature does not verify] |     Header SHA1 digest: BAD (Expected 
9ca2e0aec038e562d33442271ee52c08ded0d637 != 
9ca2e3aec038e562d33442271ee52c08ded0d637)
   [2-Signature does not verify] |     Payload SHA256 digest: BAD (Expected 
6632dfb6e78fd3346baa860da339acdedf6f019fb1b5448ba1baa6cef67de795 != 
85156c232f4c76273bbbb134d8d869e93bbfc845dd0d79016856e5356dd33727)
   [5-File does not exist or signature can't be checked] |     Legacy OpenPGP 
V4 RSA/SHA256 signature, key fingerprint: 
dd492e4eeb3e470b44f34d73e279209bbb65a216: BAD
   [2-Signature does not verify] |     Legacy MD5 digest: BAD (Expected 
8e64684e4d5bd90c3c13f76ecbda9ee2 != 442a473472708c39f3ac2b5eb38b476f)]

*** 10 failures are detected in the test module "Master Test Suite"


Reply via email to