GPG check FAILED on Rhel 8/9 versions 17 & 21

[david-pulkowski]

Please provide a brief summary of the bug

We use this repo:

[Adoptium]
baseurl=https://packages.adoptium.net/artifactory/rpm/rhel/$releasever/$basearch
gpgcheck=1
gpgkey=https://packages.adoptium.net/artifactory/api/gpg/key/public
name=Adoptium Red Hat JDK
enabled=1

We have not had issues recently, but as of today, we are getting issues in our rhel 8 & 9 environments running for the packages:

• temurin-21-jdk-21
• temurin-17-jdk-17

dnf output:

 Package                                              Architecture                                 Version                                                  Repository                                      Size
==============================================================================================
Upgrading:
 temurin-17-jdk                                       x86_64                                       17.0.14.0.0.7-0                                          Adoptium                                       155 M
 temurin-21-jdk                                       x86_64                                       21.0.6.0.0.7-0                                           Adoptium                                       165 M

Transaction Summary

Package temurin-21-jdk-21.0.6.0.0.7-0.x86_64.rpm is not signed
Package temurin-17-jdk-17.0.14.0.0.7-0.x86_64.rpm is not signed
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

Did something change?

Did you test with the latest update version?

• Yes

Please provide steps to reproduce where possible

1. Use a rhel 8.10 or 9.5 image
2. Have the rhel repo installed:

[Adoptium]
baseurl=https://packages.adoptium.net/artifactory/rpm/rhel/$releasever/$basearch
gpgcheck=1
gpgkey=https://packages.adoptium.net/artifactory/api/gpg/key/public
name=Adoptium Red Hat JDK
enabled=1

Install version 17 &/or 21

Expected Results

GPG check successful

Actual Results

Package temurin-21-jdk-21.0.6.0.0.7-0.x86_64.rpm is not signed
Package temurin-17-jdk-17.0.14.0.0.7-0.x86_64.rpm is not signed
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

What Java Version are you using?

21.0.5" 2024-10-15 LTS & openjdk 17.0.13 2024-10-15

What is your operating system and platform?

Rhel 9.5:

NAME="Red Hat Enterprise Linux"
VERSION="9.5 (Plow)"
ID="rhel"
ID_LIKE="fedora"
VERSION_ID="9.5"
PLATFORM_ID="platform:el9"
PRETTY_NAME="Red Hat Enterprise Linux 9.5 (Plow)"
ANSI_COLOR="0;31"
LOGO="fedora-logo-icon"
CPE_NAME="cpe:/o:redhat:enterprise_linux:9::baseos"
HOME_URL="https://www.redhat.com/"
DOCUMENTATION_URL="https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9"
BUG_REPORT_URL="https://issues.redhat.com/"

REDHAT_BUGZILLA_PRODUCT="Red Hat Enterprise Linux 9"
REDHAT_BUGZILLA_PRODUCT_VERSION=9.5
REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux"
REDHAT_SUPPORT_PRODUCT_VERSION="9.5"

# And:

RHEL_8.10

How did you install Java?

Adoptium repo and then with dnf

Did it work before?

Yes, for well over a year

Did you test with other Java versions?

Relevant log output

[jerboaa]

Thanks. Duplicate of adoptium/installer#1110

[david-pulkowski]

@jerboaa thank you :)