Package zoom_openSUSE_x86_64.rpm version 5.10.4.2845_openSUSE is unsigned

[Martin91575]

I use the openSUSE rpm package of the meetings desktop client
However, I definitely prefer to install software that is correctly cryptographically signed. But this package IS NOT!
That was not a problem so far.

However, the recent version 5.10.4 is not signed at all (see rpm -qpi output below), and the gpg signature validation fails because the signature is missing: see below line "Signature"

rpm -qpi zoom_openSUSE_x86_64.rpm
Name        : zoom
Version     : 5.10.4.2845_openSUSE
Release     : 1
Architecture: x86_64
Install Date: (not installed)
Group       : default
Size        : 478466233
License     : see https://www.zoom.us/
Signature   : (none)
Source RPM  : zoom-5.10.4.2845_openSUSE-1.src.rpm
Build Date  : So 24 Apr 2022 13:31:02 CEST
Build Host  : localhost
Relocations : / 
Packager    : Zoom Linux Team <https://support.zoom.us>
Vendor      : Zoom Video Communications, Inc.
URL         : https://www.zoom.us
Summary     : Zoom Cloud Meetings

[tilld]

That's still a problem with the recent release zoom-5.10.6.3192_openSUSE-1.x86_64 (RPM is not signed).

Currently there seems to be no channel for obtaining authenticated (i.e. signed) updates.

@ zoom:

Any chance of getting this fixed?

[Martin91575]

Yes and download page promises rpms to be signed. And there's even a description in German language provided how to import GPG key.

@Zoom please fix providing unsigned rpm packages! This has been working.

[tilld]

Yet again with

zoom-5.11.3.3882_openSUSE-1.x86_64

 RPM is unsigned again.

@Zoom: Could you please fix this? (And perhaps also adjust your release process so that signing is automatically done?)

[davidmiller72]

---

@Martin91575 wrote:

I use the openSUSE rpm package of the meetings desktop client
However, I definitely prefer to install software that is correctly cryptographically signed. But this package IS NOT!
That was not a problem so far.

However, the recent version 5.10.4 is not signed at all (see rpm -qpi output below), and the gpg signature validation fails because the signature is missing: see below line "Signature"

rpm -qpi zoom_openSUSE_x86_64.rpm
Name        : zoom
Version     : 5.10.4.2845_openSUSE
Release     : 1
Architecture: x86_64
Install Date: (not installed)
Group       : default
Size        : 478466233
License     : see https://www.zoom.us/
Signature   : (none)
Source RPM  : zoom-5.10.4.2845_openSUSE-1.src.rpm
Build Date  : So 24 Apr 2022 13:31:02 CEST
Build Host  : localhost
Relocations : / 
Packager    : Zoom Linux Team <https://support.zoom.us>
Vendor      : Zoom Video Communications, Inc.
URL         : https://www.zoom.us
Summary     : Zoom Cloud Meetings

---

my zoom works in tumbleweed - this is how I installed it.

sudo zypper in zoom

Thanks

Dav Miller

usps tracking