François Andriot composed on 2026-05-26 16:06 (UTC+0200):

Felix Miata a écrit :

...

https://paste.centos.org/view/raw/72b10f3b will expire in 23 hours, is log of failure to update trinity packages for 9 to those for 10.

From what I understand, you have trouble installing TDE 14.1.6 packages on mga10, after installing mga9 packages.

I see suspicious messages regarding insecure SHA1 signatures. I understand that SHA1 is now considered insecure and should be avoided. But the mga10 packages are signed using SHA256. So the error maybe related to the older mga9 packages that are already installed ?

I've just tested installing a fresh MGA10 virtual machine. Then following the Trinity wiki instructions. I have no problem installing and running TDE 14.1.6. No signature problem at all.

Happened again on another host, upgraded from 9 w/ 14.1.5, to 10 on 8 Feb., with no enabled TDE repos during the upgrade, and no updates since before today. Today I added the TDE repos for 10 prior to beginning today's upgrade from the 8 Feb. state. I doubt this would be reproducible starting with a fresh 9 install to start with as you did.

# inxi -S System: Host: gx62b Kernel: 6.18.9-desktop-1.mga10 arch: x86_64 bits: 64 Console: pty pts/1 Distro: Mageia 10 # urpmi.update -a medium "Core Release" is up-to-date medium "Core Updates" is up-to-date medium "Core Updates Testing" is up-to-date medium "Nonfree Release" is up-to-date medium "Nonfree Updates" is up-to-date medium "Tainted Release" is up-to-date medium "Tainted Updates" is up-to-date medium "trinity" is up-to-date medium "trinity-noarch" is up-to-date # time urpmi --auto-select | tee > /tmp/urpmilog.txt error: Verifying a signature using certificate 71236F0FF403B2B663E744111DBAA9EB2AB131C6 (Trinity Desktop Environment (RPM Signing Key) francois.andriot@free.fr): 1. Certificate 1DBAA9EB2AB131C6 invalid: policy violation because: No binding signature at time 2025-11-22T13:52:08Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2023-02-01T00:00:00Z 2. Certificate 1DBAA9EB2AB131C6 invalid: policy violation because: No binding signature at time 2026-05-31T16:03:54Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2023-02-01T00:00:00Z error: Verifying a signature using certificate 71236F0FF403B2B663E744111DBAA9EB2AB131C6 (Trinity Desktop Environment (RPM Signing Key) francois.andriot@free.fr): 1. Certificate 1DBAA9EB2AB131C6 invalid: policy violation because: No binding signature at time 2025-11-22T13:52:08Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2023-02-01T00:00:00Z 2. Certificate 1DBAA9EB2AB131C6 invalid: policy violation because: No binding signature at time 2026-05-31T16:03:54Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2023-02-01T00:00:00Z error: Verifying a signature using certificate 71236F0FF403B2B663E744111DBAA9EB2AB131C6 (Trinity Desktop Environment (RPM Signing Key) francois.andriot@free.fr): 1. Certificate 1DBAA9EB2AB131C6 invalid: policy violation because: No binding signature at time 2025-11-22T13:52:08Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2023-02-01T00:00:00Z 2. Certificate 1DBAA9EB2AB131C6 invalid: policy violation because: No binding signature at time 2026-05-31T16:03:54Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2023-02-01T00:00:00Z ... error: Verifying a signature using certificate 71236F0FF403B2B663E744111DBAA9EB2AB131C6 (Trinity Desktop Environment (RPM Signing Key) francois.andriot@free.fr): 1. Certificate 1DBAA9EB2AB131C6 invalid: policy violation because: No binding signature at time 2026-04-28T07:37:23Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2023-02-01T00:00:00Z 2. Certificate 1DBAA9EB2AB131C6 invalid: policy violation because: No binding signature at time 2026-05-31T16:17:04Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2023-02-01T00:00:00Z Preparing... ########################################################################################################################################################## Installation failed: package lib64tqt3-mt-3.5.0-14.1.6_1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package lib64dbus-1-tqt0-2:0.9-14.1.6_1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package lib64art_lgpl_2-2-2:2.3.22-14.1.6_1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package lib64tqt4-2:4.2.0-14.1.6_1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdebase-runtime-data-common-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdebase-data-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-ksysguardd-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-filesystem-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-arts-2:1.5.10-14.1.6_1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package lib64avahi-tqt1-2:0.6.30-14.1.6_1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdelibs-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-libkonq-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdebase-bin-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kdesktop-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdebase-tdeio-plugins-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kicker-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kcontrol-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kfind-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-konqueror-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-twin-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-libkateinterfaces-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kwrite-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kate-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-ksmserver-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-konqueror-nsplugins-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdm-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdepasswd-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdebase-tdeio-smb-plugin-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-klipper-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kappfinder-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-ksplash-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kpersonalizer-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kpager-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdebase-tdeio-pim-plugins-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdebase-libtqt3-integration-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdeprint-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-ktip-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-khelpcenter-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-konsole-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-ksysguard-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kmenuedit-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-tdebase-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-ksnapshot-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package lib64dbus-tqt-1-0-2:0.63-14.1.6_1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kcpuload-2:2.00-14.1.6_1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED package trinity-kcalc-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED trinity-kicker >= 14.1.6 is needed by trinity-kmix-14.1.6-1.mga10.x86_64 package trinity-kruler-14.1.6-1.mga10.x86_64 does not verify: Header V4 RSA/SHA256 Signature, key ID 2ab131c6: NOTTRUSTED

real 0m25.285s user 0m7.359s sys 0m0.787s #