Subject: epel 5 repos have signature errors

From: Michael DePaulo <[email-masked]>
Date: Fri, 12 Dec 2014 09:22:30 -0500

Package: buildscripts
Severity: normal

As reported here:

http://lists.x2go.org/pipermail/x2go-user/2014-December/002705.html

A CentOS 5 user is getting these errors:

error: nx-libs-3.5.0.28-0.0x2go1.1.git20141114.546.main.el5.centos: Header V4
RSA/SHA1 signature: BAD, key ID 5bfe2b6e
error: libXcomp-3.5.0.28-0.0x2go1.1.git20141114.546.main.el5.centos: Header V4
RSA/SHA1 signature: BAD, key ID 5bfe2b6e
etc....

The cause appears to be that CentOS 5 cannot handle V4 signatures, only V3.
http://adminotes.blogspot.fr/2011/12/centos-6-rpm-sign-problem-v4-signatures.html