Bug 496266

Summary: Product Creator creates product without content asc
Product: [openSUSE] openSUSE 11.1 Reporter: Dean Hilkewich <deanjo>
Component: YaST2Assignee: Ladislav Slezák <lslezak>
Status: RESOLVED WONTFIX QA Contact: Jiri Srain <jsrain>
Severity: Normal    
Priority: P3 - Medium CC: dmacvicar, jsuchome
Version: Final   
Target Milestone: ---   
Hardware: Other   
OS: openSUSE 11.1   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: y2log: starting installation with unsigned source

Description Dean Hilkewich 2009-04-18 17:43:28 UTC
User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.8) Gecko/2009032600 SUSE/3.0.8-1.2 Firefox/3.0.8

When creating a bootable iso not using digital signing, the resulting iso will result in getting a message from Yast at the install saying,

"File '/content.asc' not found on medium 'cd:///?devices=/dev/sr0'

Reproducible: Always

Steps to Reproduce:
1.
2.
3.
Comment 1 Jiří Suchomel 2009-04-20 08:40:13 UTC
content.asc is only created for signed products
Comment 2 Dean Hilkewich 2009-04-20 15:21:22 UTC
Then shouldn't there be some sort of check to see if the product is to be bootable as it allows you to create such a product that is unusable?
Comment 3 Jiří Suchomel 2009-04-21 09:35:27 UTC
True.
Comment 4 Jiří Suchomel 2009-04-21 09:46:59 UTC
Created attachment 287035 [details]
y2log: starting installation with unsigned source
Comment 5 Jiří Suchomel 2009-04-21 09:47:47 UTC
Why does zypp report error on missing content.asc when unsigned source is used?
Could it be suppressed somehow?
Comment 6 Duncan Mac-Vicar 2009-05-12 11:41:26 UTC
I tried it using HAE and deleting the .asc and .key file:

> sudo zypper ref hae
File 'content' is unsigned, continue? [yes/_no_]: y
Retrieving repository 'hae' metadata [done]
Building repository 'hae' cache [done]
Specified repositories have been refreshed.

So I can't reproduce what you mean.
Comment 7 Jiří Suchomel 2009-05-12 11:50:11 UTC
Did you check the log?

There's

2009-04-21 07:35:54 <5> linux(2923) [zypp] Exception.cc(log):119 MediaHandler.cc(getFile):1234 THROW:    MediaHandler.cc(getFile):1234: File '/content.asc' not found on medium 'cd:///?devices=/dev/sr0'
2009-04-21 07:35:54 <5> linux(2923) [zypp] Exception.cc(log):119 
2009-04-21 07:35:54 <5> linux(2923) [zypp] Exception.cc(log):119 MediaSetAccess.cc(provideFileInternal):282 CAUGHT:   MediaHandler.cc(getFile):1234: File '/content.asc' not found on medium 'cd:///?devices=/dev/sr0'
2009-04-21 07:35:54 <5> linux(2923) [zypp] Exception.cc(log):119 


Jano, can you tell anything about it?
Comment 8 Jan Kupec 2009-05-12 12:43:04 UTC
Yes, zypp complains when the repo is not sined and UIs are supposed to ask the user whether to continue despite of that. But the UI should not get a "media" error, but the "repo unsigned" error, like in c#6.

It seems the error happens, because yast specifically uses just the media backend via SourceProvideSignedFile builtin:

2009-04-21 07:35:54 <1> linux(2923) [Pkg] Packages.ycp:986 Pkg Builtin called: SourceProvideSignedFile

If the requested file is not signed, the call (rightfully so :O) fails.
Comment 9 Jiří Suchomel 2009-05-12 13:56:38 UTC
Ehm - Ladislav, seems that in some cases, SourceProvideSignedFile should not be used...
Comment 10 Duncan Mac-Vicar 2009-05-12 15:02:18 UTC
I looked at the code of Fetcher, and if you ask for a digested file, the following things are expected:

- file checksum is listed in some index, index is retrieved and checked for signatures. If signature does not exist, the signature and key are optional so it does not fail and ask the user to confirm unsigned file (for the index).

A digested file is a file mentioned in some index (for use with signed checksum indexes like content or SHA1SUMS) or a filename + a known checksum.

Note that Fetcher has no concept of "signed files", like the index itself or content itself which need to be retrieved using enqueue + a SignatureFileChecker.

I don't know the context in which YaST downloads content file itself.
Comment 11 Tomáš Chvátal 2017-08-11 17:39:55 UTC
11.1 is out of openSUSE scope. As this is pre-ruby yast migration please open a new issue against current codestream if the issue is still present.