Bug 113503 - LO install files not signed
Summary: LO install files not signed
Status: RESOLVED NOTABUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Installation (show other bugs)
Version:
(earliest affected)
5.4.2.2 release
Hardware: x86-64 (AMD64) All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-10-29 06:01 UTC by Peter Tosh
Modified: 2017-10-31 13:27 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Peter Tosh 2017-10-29 06:01:17 UTC 
Description:
Hi, and thanx for libreoffice

LibreOfficeDev_6.0.0.0.alpha1_Linux_x86-64_rpm.tar

and

LibreOffice_5.3.7.2_Linux_x86-64_rpm.tar

the files are not signed.
It is annoying to accept aech file during install.
Please signe the files.
older install files allways were signed. 

Steps to Reproduce:
1.download the *tar
2.expand
3.during install with zypper on Suse Leap42.3 you have to accept each file 
(its shown: file not signed) 
It is annoying to accept each file during install.

Actual Results:  
its shown: file not signed

Expected Results:
Please signe the files like bevore


Reproducible: Always


User Profile Reset: Yes


OpenGL enabled: Yes

Additional Info:
tested Suse Leap42.3 KDE 4.13.10-1.1


User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36
Comment 1 Xisco Faulí 2017-10-31 13:27:23 UTC 
Information from IRC:

<x1sc0> cloph, should this builds be signed ? https://bugs.documentfoundation.org/show_bug.cgi?id=113503
<x1sc0> s/this/these
<cloph> No.
<cloph> The tarballs have gpg signatures, but the rpms themselves are not.
<cloph> install with rpm directly, not with your distro-manager's tools/use a switch to ignore rpm signature verification.
<x1sc0> ok thanks