Project

Profile

Help

Issue #8571

Updated by daviddavis almost 3 years ago

Steps to reproduce: 

 1. Enable md5 via ALLOWED_CONTENT_CHECKSUMS and sync down an md5 repository (eg https://fixtures.pulpproject.org/rpm-with-md5/) 
 2. Disable md5 and run pulpcore-manager handle-artifact-checksums 
 3. Now create a publication for your repository version using an allowed checksum: 

 ``` 
 http :/pulp/api/v3/publications/rpm/rpm/ repository_version=/pulp/api/v3/repositories/rpm/rpm/a1263205-e97a-452f-a674-f516714812c6/versions/1/ package_checksum_type="sha256" 
 ``` 

 You'll get this error: 

 ``` 
 ValueError: Package camel-0:0.1-1.noarch as content unit 6d518294-c03c-4cf1-b8ef-0e663b73274a contains forbidden checksum type 'md5', thus can't be published. Checksum must be one of the allowed checksum types. 
 ``` 

 I believe [this check](https://github.com/pulp/pulp_rpm/blob/d0c9badd21251e684376a6e0b0fca11c6faec208/pulp_rpm/app/tasks/publishing.py#L431-L440 ) is faulty since it solely checks `rpm_package.checksum_type` and doesn't consider `package_checksum_type`. even though the package might have several checksum types it could be published with,

Back