Skip to content

PowerShell package in yum repository needs to have a payload digest. #15866

@agentoranger

Description

@agentoranger

Prerequisites

Steps to reproduce

I am experiencing a problem when attempting to install PowerShell from the Microsoft yum repo when using FIPS mode on RedHat 8.4. An additional SHA256 digest needs to be added to the package so that FIPS enabled systems running Redhat 8+ can validate the payload of the package.

https://access.redhat.com/solutions/4460971

Expected behavior

yum install powershell

Powershell would then be installed

Actual behavior

yum install powershell

Powershell is not installed, failing validation.

Error details

Error: Transaction test error:
  package powershell-7.1.3-1.centos.8.x86_64 does not verify: no digest

[root@test75-rhel8 ~]# rpm --checksig -v /var/cache/dnf/packages-microsoft-com-prod-37360e73ce94b4be/packages/powershell-7.1.3-1.centos.8.x86_64.rpm
/var/cache/dnf/packages-microsoft-com-prod-37360e73ce94b4be/packages/powershell-7.1.3-1.centos.8.x86_64.rpm:
    Header V4 RSA/SHA256 Signature, key ID be1229cf: OK
    Header SHA1 digest: OK
    Payload SHA256 digest: NOTFOUND
    V4 RSA/SHA256 Signature, key ID be1229cf: OK
    MD5 digest: NOTFOUND

Environment data

Redhat Enterprise Linux v8+ or CentOS v8+ when running in FIPS mode

Visuals

Capture

Metadata

Metadata

Assignees

No one assigned

    Labels

    Area-Maintainers-Buildspecific to affecting the buildIssue-Questionideally support can be provided via other mechanisms, but sometimes folks do open an issue to get aResolution-FixedThe issue is fixed.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions