centos-kernel perl-generators and perl-interpreter "--checksig" fail?

[pjwelsh]

Due to past package corruption issues on systems, I include an "rpm --checksig" for all packages. Recently, the centos-kernel/x86_64/Packages/{perl-generators-1.08-6.el7.noarch.rpm,perl-interpreter-5.16.3-6.el7.noarch.rpm} have been failing the check and my reposync fails as a result.

So, downloading the files (from 2018) directly from http://mirror.centos.org/centos/7/updat ... /Packages/ produces the same failed key/"digests SIGNATURES NOT OK"/"NOKEY" results:

Code: Select all

$ rpm --checksig perl-generators-1.08-6.el7.noarch.rpm
perl-generators-1.08-6.el7.noarch.rpm: digests SIGNATURES NOT OK
[
$ rpm --checksig perl-interpreter-5.16.3-6.el7.noarch.rpm
perl-interpreter-5.16.3-6.el7.noarch.rpm: digests SIGNATURES NOT OK

$ rpm -v --checksig perl-interpreter-5.16.3-6.el7.noarch.rpm
perl-interpreter-5.16.3-6.el7.noarch.rpm:
    Header V3 RSA/SHA256 Signature, key ID 62505fe6: NOKEY
    Header SHA1 digest: OK
    V3 RSA/SHA256 Signature, key ID 62505fe6: NOKEY
    MD5 digest: OK

$ rpm -v --checksig perl-generators-1.08-6.el7.noarch.rpm
perl-generators-1.08-6.el7.noarch.rpm:
    Header V3 RSA/SHA256 Signature, key ID 62505fe6: NOKEY
    Header SHA1 digest: OK
    V3 RSA/SHA256 Signature, key ID 62505fe6: NOKEY
    MD5 digest: OK

No other files seem affected at this point.
Any idea what's going on?

[TrevorH]

Hmm, perl-generators is from EPEL and perl-interpreter doesn't exist in any of my repos.

[pjwelsh]

Those rpms are both included in the centos-kernel repo currently:
http://mirror.centos.org/altarch/7/kern ... /Packages/

Code: Select all

$ rpm -qf /etc/yum.repos.d/CentOS-x86_64-kernel.repo 
centos-release-7-9.2009.1.el7.centos.x86_64

Code: Select all

 cat /etc/yum.repos.d/CentOS-x86_64-kernel.repo
[centos-kernel]
name=CentOS LTS Kernels for $basearch
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=kernel&infra=$infra
baseurl=http://mirror.centos.org/altarch/7/kernel/$basearch/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

[centos-kernel-experimental]
name=CentOS Experimental Kernels for $basearch
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=experimental&infra=$infra
#baseurl=http://mirror.centos.org/altarch/7/experimental/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

[pjwelsh]

Created CentOS bug https://bugs.centos.org/view.php?id=18058
Could be nothing, could be something, not sure.