On zypper dup this morning, the following message appeared:
Warning: Digest verification failed for file 'libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64.rpm'
[/var/tmp/zypp.tmp/AP_0xv2WqCm/x86_64/libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64.rpm]
expected a5edea684f4e3f3cf101fab0103bfcc962b6f75dc7dba06bd15fed25559cd72dcbd09332c5f68ae6487b30defcbd4067873b0deb5b1dacecbee097046e069e1c
but got 16d670a4081d771fe6a485fc549e83bd9b757bfeb03517850e9ff2fc6c245af54a2df8291431fdea36085e0226adb8a541e6009ded4e942f10a1e346a3d4186f
Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.
However if you made certain that the file with checksum '16d6..' is secure, correct
and should be used within this operation, enter the first 4 characters of the checksum
to unblock using this file on your own risk. Empty input will discard the file.
Unblock or discard? [16d6/...? shows all options] (discard)
I can’t remember seeing anything similar in eight years as a Tumbleweed user, so thought I should check before proceeding.
FWIW: I installed the recent openSUSE-build-key.