article Qlik Replicate: Linux Installation warning: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY in Official Support Articles

Qlik Replicate: Linux Installation warning: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY

DesmondWOO — Thu, 18 Jan 2024 12:09:59 GMT

When installing Qlik Replicate v2023.5 on RHEL/CentOS v8.x, you may encounter a warning message from rpm as follows:

warning: areplicate-2023.5.0-213.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY

This warning message indicates that rpm is unable to verify the package signature due to the absence of the public key.

Resolution

Please perform the following commands before trying to install the RPM package:

$ rpm -q gpg-pubkey --qf '%{version}-%{release} %{summary}\n' | sed '/qlik.com/!d;s/ .*$//' | xargs -n 1 -I {} sudo rpm -e gpg-pubkey-{}

$ curl https://qlikcloud.com/.well-known/qlik-codesign-public-keys.asc > qlik-codesign-public-keys.asc

$ sudo rpm --import qlik-codesign-public-keys.asc

```
$ rpm --checksig <qlik-rpm-package>
```

Where the commands do the following:

Removes previously installed Qlik code signing public keys (optional but recommended to allow expired keys to be removed)
Fetches the current Qlik code-signing public keys
Imports the current public keys into RPM
Verifies the authenticity of the desired Qlik RPM package

Here is an example of an RPM package that passed the authenticity check:

$ rpm --checksig areplicate-2023.5.0-152.x86_64.rpm
areplicate-2023.5.0-152.x86_64.rpm: digests SIGNATURES OK

An example of failed check is:

$ rpm --checksig areplicate-2023.5.0-152.x86_64.rpm
areplicate-2023.5.0-152.x86_64.rpm: digests SIGNATURES NOT OK

Then proceed with the installation or upgrade as per the instructions in the user guide.

Environment

v2023.5, v2023.11 or after on Linux 8.x (64-bit)

Re: Qlik Replicate: Linux Installation warning: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY

mnagy — Tue, 14 May 2024 16:40:47 GMT

How does this apply to the upgrade process? We got this message during our upgrade, but it seemed to complete. We were able to restart replicate, I think the failure to start was because we had to kill the repctl prior to the upgrade.

test:/ora_home/stage # rpm -Uvh --prefix /qlik areplicate-2023.11.0-282.x86_64.rpm warning: areplicate-2023.11.0-282.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY Verifying... ################################# [100%] Preparing... ################################# [100%] Updating / installing... 1:areplicate-2023.11.0-282 ################################# [ 50%] Failed to start service areplicate Not all services have been started warning: %post(areplicate-2023.11.0-282.x86_64) scriptlet failed, exit status 10 Cleaning up / removing... 2:areplicate-2022.11.0-208 ################################# [100%]

Re: Qlik Replicate: Linux Installation warning: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY

idkdba — Fri, 23 Aug 2024 18:25:23 GMT

We got the same error as above.

Failed to start service areplicate
Not all services have been started

2023.5+ not supported for RHEL 7 anymore?

Re: Qlik Replicate: Linux Installation warning: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY

john_wang — Sat, 24 Aug 2024 00:46:57 GMT

Hello @idkdba ,

From 2023.5, RHEL 7 is not supported anymore. Same for versions 2023.11, 2024.5 and above versions.

Regards,

John.