search

ivpn / desktop-app

Official IVPN Desktop app
https://www.ivpn.net/apps/
GNU General Public License v3.0
322 stars 48 forks source link

Invalid signature & SHA256 mismatch of 3.14.14 #382

Open pwn-all opened 4 weeks ago

pwn-all commented 4 weeks ago

Bug report

Describe your environment

Describe the problem

Not valid update file signature and SHA256 hash does not match.

Steps to reproduce:

  1. Previously installed by official instruction (https://www.ivpn.net/knowledgebase/linux/fedora-silverblue/)
  2. Try update the app

Observed Results:

error: importing RPMs: package ivpn-ui-3.14.14-1.x86_64 cannot be verified and repo ivpn-stable is GPG enabled: /var/cache/rpm-ostree/repomd/ivpn-stable-40-x86_64/packages/ivpn-ui-3.14.14-1.x86_64.rpm could not be verified. /var/cache/rpm-ostree/repomd/ivpn-stable-40-x86_64/packages/ivpn-ui-3.14.14-1.x86_64.rpm: DIGEST: SIGNATURE: NOT OK

$ sha256sum /var/cache/rpm-ostree/repomd/ivpn-stable-40-x86_64/packages/ivpn-ui-3.14.14-1.x86_64.rpm d2598298369c4d766d60e878bf48b2fa2a9ae5daae7b363561cb627bf9774aeb /var/cache/rpm-ostree/repomd/ivpn-stable-40-x86_64/packages/ivpn-ui-3.14.14-1.x86_64.rpm

Expected Results:

Normal update