openSUSE 15 "Signature verification failed for repomd.xml"

[ManOrs]

Hello,
in the last couple days i received a message about an error with the repo signature,
here is the verbose output

Code: Select all

# zypper -v ref -r veeam
Verbosity: 1
Initializing Target
Specified repositories: veeam 
Checking whether to refresh metadata for Veeam Backup for GNU/Linux - x86_64
Retrieving: repomd.xml ..........................................................................................[done (2.4 KiB/s)]
Retrieving: media ......................................................................................................[not found]
Retrieving: repomd.xml.asc ..................................................................................................[done]
Retrieving: repomd.xml.key ..................................................................................................[done]
Retrieving: repomd.xml ......................................................................................................[done]
  Repository:       Veeam Backup for GNU/Linux - x86_64              
  Key Name:         Veeam Software RPM Repository <support@veeam.com>
  Key Fingerprint:  1DD6EAD9 AF6E8F34 465D790C EA4FC237 EFDCEA77     
  Key Created:      Fri 27 Apr 2018 10:48:28 AM CEST                 
  Key Expires:      Mon 26 Apr 2021 10:48:28 AM CEST                 
  Subkey:           9FE0C49C50869B70 2018-04-27 [expires: 2021-04-26]
  Rpm Name:         gpg-pubkey-efdcea77-5ae2e3dc                     
Signature verification failed for file 'repomd.xml' from repository 'Veeam Backup for GNU/Linux - x86_64'.

    Note: Signing data enables the recipient to verify that no modifications occurred after the data
    were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system
    and in extreme cases even to a system compromise.

    Note: File 'repomd.xml' is the repositories master index file. It ensures the integrity of the
    whole repo.

    Warning: This file was modified after it has been signed. This may have been a malicious change,
    so it might not be trustworthy anymore! You should not continue unless you know it's safe.

Signature verification failed for file 'repomd.xml' from repository 'Veeam Backup for GNU/Linux - x86_64'.

Regards,
manuel

[PTide]

Hi,

Did you install the repo using the openSUSE package from here?

Thanks

[ManOrs]

apparently i did not

weird how it worked for a while (1-2 months at the least) before starting to throw the error

thanks @PTide

[ManOrs]

update @PTide

verified on a second machine that was giving the same error,
there i did install the repo package, and trying to refresh the repo gives me

Code: Select all

 - Signature verification failed for repomd.xml

Regards,
manuel

[PTide]

The IT team has checked the repo and performed some fixes, please see if it works now.

Thanks

[ManOrs]

no more errors

thanks @PTide