Error - Signature verification failed

Hi everyone.
How long will this error last?

sudo zypper ref
Refreshing service 'NVIDIA'.
Refreshing service 'openSUSE'.
Looking for gpg keys in repository update-tumbleweed.
  gpgkey=http://cdn.opensuse.org/update/tumbleweed/repodata/repomd.xml.key
Retrieving repository 'update-tumbleweed' metadata ....................................................................[done]
Building repository 'update-tumbleweed' cache .........................................................................[done]
Looking for gpg keys in repository repo-non-free.
  gpgkey=https://download.nvidia.com/opensuse/tumbleweed/repodata/repomd.xml.key
Signature verification failed for file 'repomd.xml' from repository 'repo-non-free'.

    Note: Signing data enables the recipient to verify that no modifications occurred after the data
    were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system
    and in extreme cases even to a system compromise.

    Note: File 'repomd.xml' is the repositories master index file. It ensures the integrity of the
    whole repo.

    Warning: This file was modified after it has been signed. This may have been a malicious change,
    so it might not be trustworthy anymore! You should not continue unless you know it's safe.

    Note: This might be a transient issue if the server is in the midst of receiving new data. The
    data file and its signature are two files which must fit together. In case the request hit the
    server in the midst of updating them, the signature verification might fail. After a few
    minutes, when the server has updated its data, it should work again.

Signature verification failed for file 'repomd.xml' from repository 'repo-non-free'. Continue? [yes/no] (no)

Thanks.

https://bugzilla.opensuse.org/show_bug.cgi?id=1280119

1 Like

Merci bien.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.