Another bad signature file in zypper

Some of the repositories have not been refreshed because of an error.
Signature verification failed for file ‘repomd.xml’ from repository ‘Update repository from SUSE Linux Enterprise 15’.

Note: Signing data enables the recipient to verify that no modifications
occurred after the data were signed. Accepting data with no, wrong or
unknown signature can lead to a corrupted system and in extreme cases even
to a system compromise.

Note: File 'repomd.xml' is the repositories master index file. It ensures
the integrity of the whole repo.

Warning: This file was modified after it has been signed. This may have been
a malicious change, so it might not be trustworthy anymore! You should not
continue unless you know it's safe.

Signature verification failed for file ‘repomd.xml’ from repository ‘Update repository from SUSE Linux Enterprise 15’. Continue? [yes/no] (no):

As you only show incomplete output…incomplete terminal output, missing repo URLs…

As experienced openSUSe user you should already know this error and have read this countless times here in the forum. You can chose another mirror or use mirrorservice, or wait.
See for some hints:

1 Like

the repo is in the error. the rest is not necessary as it also says “SUSE Linux Enterprise 15” which is /update/leap/15.5/sle in the repos no matter which mirror you go to.

repository ‘Update repository from SUSE Linux Enterprise 15’.

sorry the bright red does not show:

Repository 'openSUSE-Leap-15.5-Oss' is up to date.                              
Signature verification failed for file 'repomd.xml' from repository 'Update repository from SUSE Linux Enterprise 15'.

    Note: Signing data enables the recipient to verify that no modifications
    occurred after the data were signed. Accepting data with no, wrong or
    unknown signature can lead to a corrupted system and in extreme cases even
    to a system compromise.

    Note: File 'repomd.xml' is the repositories master index file. It ensures
    the integrity of the whole repo.

    Warning: This file was modified after it has been signed. This may have been
    a malicious change, so it might not be trustworthy anymore! You should not
    continue unless you know it's safe.

 Signature verification failed for file 'repomd.xml' from repository 'Update repository from SUSE Linux Enterprise 15'.          Continue? [yes/no] (no): 
 Retrieving repository 'Update repository from SUSE Linux Enterprise 15' m[error]
 Repository 'Update repository from SUSE Linux Enterprise 15' is invalid.
 [os-repo-sle-update|https://mirrorcache-us.opensuse.org/update/leap/15.5/sle/] Valid metadata not found at specified URL
 History:
  - Signature verification failed for repomd.xml
  - Can't provide /repodata/repomd.xml

 Please check if the URIs defined for this repository are pointing to a valid repository.
 Skipping repository 'Update repository from SUSE Linux Enterprise 15' because of the above error.

No. “SUSE Linux Enterprise 15” is an alias. You can name your repos with every alias you want and it tells nothing about the real URL. You can even name it “Bananarama2023”. Everything would work with such an alias but it tells you nothing about the URL. That is why users are required to provide precise data as requested…

Did you already try to use the standard URLs like

https://download.opensuse.org/update/leap/15.5/sle/
leaptest:~ # zypper refresh
Repository 'Update repository of openSUSE Backports' is up to date.                                           
Repository 'Non-OSS Repository' is up to date.                                                                
Repository 'Open H.264 Codec (openSUSE Leap)' is up to date.                                                  
Repository 'Haupt-Repository' is up to date.                                                                  
Repository 'Update repository with updates from SUSE Linux Enterprise 15' is up to date.                      
Repository 'Hauptaktualisierungs-Repository' is up to date.                                                   
Repository 'Aktualisierungs-Repository (Nicht-Open-Source-Software)' is up to date.                           
All repositories have been refreshed.
leaptest:~ # 

leaptest:~ # zypper lr -d
#  | Alias                       | Name                                                                                        | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                     | Service
---+-----------------------------+---------------------------------------------------------------------------------------------+---------+-----------+---------+----------+--------+-------------------------------------------------------------------------+--------
 1 | openSUSE-Leap-15.5-1        | openSUSE-Leap-15.5-1                                                                        | No      | ----      | ----    |   99     | rpm-md | cd:/?devices=/dev/disk/by-id/ata-VBOX_CD-ROM_VB2-01700376               | 
 2 | repo-backports-debug-update | Update repository with updates for openSUSE Leap debuginfo packages from openSUSE Backports | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/update/leap/15.5/backports_debug/          | 
 3 | repo-backports-update       | Update repository of openSUSE Backports                                                     | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.5/backports/                | 
 4 | repo-debug                  | Debug Repository                                                                            | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.5/repo/oss/     | 
 5 | repo-debug-non-oss          | Debug Repository (Non-OSS)                                                                  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.5/repo/non-oss/ | 
 6 | repo-debug-update           | Update Repository (Debug)                                                                   | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.5/oss/                | 
 7 | repo-debug-update-non-oss   | Update Repository (Debug, Non-OSS)                                                          | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.5/non-oss/            | 
 8 | repo-non-oss                | Non-OSS Repository                                                                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.5/repo/non-oss/       | 
 9 | repo-openh264               | Open H.264 Codec (openSUSE Leap)                                                            | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://codecs.opensuse.org/openh264/openSUSE_Leap/                      | 
10 | repo-oss                    | Haupt-Repository                                                                            | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.5/repo/oss/           | 
11 | repo-sle-debug-update       | Update repository with debuginfo for updates from SUSE Linux Enterprise 15                  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.5/sle/                | 
12 | repo-sle-update             | Update repository with updates from SUSE Linux Enterprise 15                                | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.5/sle/                      | 
13 | repo-source                 | Source Repository                                                                           | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/distribution/leap/15.5/repo/oss/    | 
14 | repo-update                 | Hauptaktualisierungs-Repository                                                             | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.5/oss                       | 
15 | repo-update-non-oss         | Aktualisierungs-Repository (Nicht-Open-Source-Software)                                     | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.5/non-oss/                  | 
leaptest:~ # 

leaptest:~ # zypper up
Loading repository data...
Reading installed packages...

The following 12 packages are going to be upgraded:
  audit fonts-config libaudit1 libauparse0 libheif1 libldap-2_4-2 libldap-data openldap2-client publicsuffix
  python3-requests system-group-audit ucode-intel

12 packages to upgrade.
Overall download size: 7.4 MiB. Already cached: 0 B. After the operation, additional 549.7 KiB will be used.
Continue? [y/n/v/...? shows all options] (y): y

I posted this so that other would see that they are not the only ones seeing this error - I also informed the OpenSUSE factory mailing list about this problem too.

The majority of users do not change the repo names - they do keep obsolete entries for previous versions that cause problems, I support freinds, family and former co-workers running OpenSUSE (for free). I have gotten calls that this error is coming up. I doubt that more than 10% of the users of this board know where to look for the repo names.

I just use the repos that the iso install image installed and change the the source from download to mirrorcache-us for better speed. That should make no difference except to select a better mirror.

I did add packman, teamviewer and mozilla repos - I kept their names the same too.

The average user just does what the guide says to install a repo with zypper.

My 2 cents - you opinion may be different. I don’t care.