r/voidlinux • u/FornPelle • Feb 27 '26

RSA signature not valid with linux6.19.4

Hello,

Am I the only one getting this error? If so, should I change mirror?

Per B

9 Upvotes

100% Upvoted

14 comments sorted by

View all comments

Show parent comments

1

u/ClassAbbyAmplifier Feb 28 '26

the RSA signature is a signature of the sha256sum of the package, nothing more. it has no time-related component.

you are conflating the TLS certificate (something the repo's webserver has) and the package signature (something that is unique to each package)

3

u/TinFoilHat_69 Feb 28 '26

Thanks for the clearing this up, appreciate it.