Bug 496262

Summary: Product Creator makes unusable ISO when digital signing is enabled
Product: [openSUSE] openSUSE 11.1 Reporter: Dean Hilkewich <deanjo>
Component: YaST2Assignee: Jiří Suchomel <jsuchome>
Status: RESOLVED FIXED QA Contact: Jiri Srain <jsrain>
Severity: Normal    
Priority: P3 - Medium    
Version: Final   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: Yast Logs
Still fails
YaST Logs
Pic proof

Description Dean Hilkewich 2009-04-18 17:05:51 UTC
User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.8) Gecko/2009032600 SUSE/3.0.8-1.2 Firefox/3.0.8

After you create a ISO with product creator with digital signing it results in a iso that when booted halts with cd:/content Invalid Signature.  Installation aborted.


Reproducible: Always

Steps to Reproduce:
1.
2.
3.
Comment 1 Jiří Suchomel 2009-04-20 12:27:39 UTC
Ah, yes, there were several fixes for source signing in Product Creator lately. Please try installing latest version from factory (http://download.opensuse.org/factory/repo/oss/suse/noarch/) and try again.
Comment 2 Dean Hilkewich 2009-04-21 01:32:31 UTC
Factory installed.  Now you get a endless loop of Enter passphrase.  Enter the passphrase and then it immediately pops up with 

Error: Could not digitally sign the source.  Try again?  YES/NO
Comment 3 Dean Hilkewich 2009-04-21 01:33:33 UTC
Well it's not a endless loop I guess.  You only have to keep clicking No for every activated repo and then it finally lets you exit.
Comment 4 Jiří Suchomel 2009-04-21 07:36:38 UTC
Hm, something is broken with factory packages, please write me a versions of your yast packages and gpg.
Comment 5 Jiří Suchomel 2009-04-21 09:39:22 UTC
I also upgraded to factory: whole yast and gpg2. Now I was able to create product correctly (without error mentioned above) and it asked me only once.

The problem is, that current factory is partially broken, Qt yast still doesn't work there. I hope this will settle in 11.2 Alphas.
Comment 6 Jiří Suchomel 2009-04-22 10:52:50 UTC
For me it works with the latest packages, I have tried with the latest build of pre-11.2 release.

I think you can use the packages from factory (or from YaST repository:
https://build.opensuse.org/project/show?project=YaST%3ASVN)), but a bit later, when the Qt stuff mentioned in comment 11 is fixed.
Comment 7 Dean Hilkewich 2009-04-23 04:23:13 UTC
Jiri,

Telling people to upgrade to factory is not fixing the bug.  If you have tried to update to factory or the yast svn you would see that it COMPLETELY breaks yast in 11.1 it's entirety.  Because of 11.2 NOT going to have KDE 3.5 in it or supported this should be fixed in 11.1 as many people are not going to be upgrading to it.  This is not the first time that these bugs in Product Creator have been reported.  Everytime it's a will fix in later release.  I tried your patch, and it does not work.
Comment 8 Dean Hilkewich 2009-04-23 04:28:46 UTC
Created attachment 287657 [details]
Yast Logs
Comment 9 Jiří Suchomel 2009-04-23 10:33:26 UTC
See, I did NOT tell you to upgrade to factory now, neither to 11.2:

- I've mentioned current factory is not advisable to use
- I've written that in 11.2 Alpha it is fixed

-> and concluded that in some (near) future version of factory, correct YaST packages will be present, so you can use them. With that, you won't loose your KDE.

Anyway, I'll try to reproduce once more
Comment 10 Jiří Suchomel 2009-04-23 12:09:01 UTC
OK, I tried with latest yast2-product-creator, installed on top of openSUSE11.1 and it works: correctly signed, new product correctly booted.

Do your logs cover the situation you write about in comment 2?

Maybe the problem may be when you try to build new product generated with older product creator: could you try to create new product configuration from the start?
Comment 11 Dean Hilkewich 2009-04-23 23:13:14 UTC
Yes, the logs should cover both the upgraded product creator package as well the configuration was fresh as was the gpg key.
Comment 12 Jiří Suchomel 2009-05-21 10:49:31 UTC
Please, test with 2.18.4 version of yast2-product creator (found at
http://download.opensuse.org/repositories/home://jsuchome/openSUSE_11.1/)
Comment 13 Dean Hilkewich 2009-05-25 22:26:15 UTC
Still allows creating of a unsigned product.  Still fails.
Comment 14 Dean Hilkewich 2009-05-25 22:31:02 UTC
Created attachment 294306 [details]
Still fails
Comment 15 Jiří Suchomel 2009-06-03 11:53:38 UTC
But this bug is about "Product Creator makes unusable ISO when digital signing is enabled", why do you write that it "allows creating of a unsigned product"?

I just created signed product with yast2-product-creator-2.18.4, booted the iso, and done some installation steps. No error mentioned in original comment occurred, so this seems to be fixed....
Comment 16 Dean Hilkewich 2009-06-04 00:07:55 UTC
Seems to work now after applying the patch on virgin systems.

Feel free to close.
Comment 17 Dean Hilkewich 2009-06-04 00:17:51 UTC
Spoke too soon, slapped it in virtualbox and was greated with an unusable iso again.
Comment 18 Dean Hilkewich 2009-06-04 00:20:58 UTC
Created attachment 296097 [details]
YaST Logs
Comment 19 Dean Hilkewich 2009-06-04 00:21:39 UTC
Created attachment 296098 [details]
Pic proof
Comment 20 Jiří Suchomel 2009-06-04 07:50:39 UTC
Uhm, well, so what was a difference between your working and non-working cases?

I am not able to reproduce it, it works for me. I see that you are using many repositories, so please try (for a testing) to reduce their numbers - let's start with just one (the main oss, I assume) and test if you are able to build the signed product and boot it correctly. If yes, try adding more of them and tell me when it starts failing.
Comment 21 Jiří Suchomel 2009-06-04 07:52:04 UTC
BTW, this seems to be a duplicate of bug 478975, but its fix is already working for the reporter of the other one and also for me.
Comment 22 Jiří Suchomel 2009-10-27 08:15:02 UTC
This will be fixed in 11.2, which is close to release.