Project

Profile

Help

Story #1991

closed

As a user, uploaded units which don't pass the signature check are not imported

Added by bmbouter almost 8 years ago. Updated almost 5 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Urgent
Sprint/Milestone:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Platform Release:
2.10.0
Groomed:
Yes
Sprint Candidate:
Yes
Tags:
Pulp 2
Sprint:
Sprint 6
Quarter:

Description

When units are imported and their signature is not valid, the unit should fail to import. This should be true for both sync and upload. The key which does the validation is configured on the repo.

https://github.com/PulpQE/pulp-smash/issues/347


Related issues

Related to RPM Support - Issue #2188: Make GPG signature checking is called "filtering"CLOSED - CURRENTRELEASEsemyersActions
Has duplicate RPM Support - Issue #2103: Provide documentation and release notes for issue #1156 (signature attribute for RPMs, SRPMs, and DRPMs)CLOSED - DUPLICATEActions
Has duplicate RPM Support - Story #217: As a user, I can restrict RPMs by signatureCLOSED - DUPLICATE

Actions
Blocked by RPM Support - Story #1156: As a user, I can have an "signature" attribute stored for RPMs, SRPMs, and DRPMsCLOSED - CURRENTRELEASEipanova@redhat.com

Actions
Blocked by Pulp - Issue #2030: importer config is not validated during the updateCLOSED - CURRENTRELEASEipanova@redhat.comActions

Also available in: Atom PDF