Fedora-Workstation-39-1.5-x86_64-CHECKSUM doesn't have any GPG data, so checking the download integrity isn't possible.
Unfortunately I can't report this in the Fedora Websites repo, because Gitlab.com now demands a phone number to complete registration and I refuse do to that.
Here is the file open in Text Editor:
<img alt="Screenshot_from_2023-12-18_16-12-00.png" src="/fedora-workstation/issue/raw/files/b68a82262a445f8f79b6d430ff25258c21a93bdd18ebc106bb0da7cbcd13e6e6-Screenshot_from_2023-12-18_16-12-00.png" />
$ gpgv --keyring ./fedora.gpg Fedora-Workstation-39-1.5-x86_64-CHECKSUM gpgv: no valid OpenPGP data found. gpgv: the signature could not be verified. Please remember that the signature file (.sig or .asc) should be the first file given on the command line
Hi, I'd rather not get Workstation WG involved in media verification. Feel free to request GPG signing from Fedora infrastructure team and see what they say.
Metadata Update from @catanzaro: - Issue close_status updated to: Won't fix - Issue status updated to: Closed (was: Open)
https://pagure.io/fedora-infrastructure/issue/11689
Thanks.
Login to comment on this ticket.