Qlik Replicate: Linux Installation warning: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY

[DesmondWOO]

When installing Qlik Replicate v2023.5 on RHEL/CentOS v8.x, you may encounter a warning message from rpm as follows:

warning: areplicate-2023.5.0-213.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY

This warning message indicates that rpm is unable to verify the package signature due to the absence of the public key.

Resolution

Please perform the following commands before trying to install the RPM package:

1. $ rpm -q gpg-pubkey --qf '%{version}-%{release} %{summary}\n' | sed '/qlik.com/!d;s/ .*$//' | xargs -n 1 -I {} sudo rpm -e gpg-pubkey-{}

2. $ curl https://qlikcloud.com/.well-known/qlik-codesign-public-keys.asc > qlik-codesign-public-keys.asc

3. $ sudo rpm --import qlik-codesign-public-keys.asc

4. $ rpm --checksig <qlik-rpm-package>

Where the commands do the following: 

1. Removes previously installed Qlik code signing public keys (optional but recommended to allow expired keys to be removed)
2. Fetches the current Qlik code-signing public keys
3. Imports the current public keys into RPM
4. Verifies the authenticity of the desired Qlik RPM package

Here is an example of an RPM package that passed the authenticity check:

$ rpm --checksig areplicate-2023.5.0-152.x86_64.rpm
areplicate-2023.5.0-152.x86_64.rpm: digests SIGNATURES OK

An example of failed check is:

$ rpm --checksig areplicate-2023.5.0-152.x86_64.rpm
areplicate-2023.5.0-152.x86_64.rpm: digests SIGNATURES NOT OK

Then proceed with the installation or upgrade as per the instructions in the user guide.

Environment

Qlik Replicate  v2023.5, v2023.11 or after on Linux  8.x (64-bit)

[mnagy]

How does this apply to the upgrade process? We got this message during our upgrade, but it seemed to complete. We were able to restart replicate, I think the failure to start was because we had to kill the repctl prior to the upgrade.

test:/ora_home/stage # rpm -Uvh --prefix /qlik areplicate-2023.11.0-282.x86_64.rpm
warning: areplicate-2023.11.0-282.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 05d7eace: NOKEY
Verifying...                          ################################# [100%]
Preparing...                          ################################# [100%]
Updating / installing...
   1:areplicate-2023.11.0-282         ################################# [ 50%]
Failed to start service areplicate
Not all services have been started
warning: %post(areplicate-2023.11.0-282.x86_64) scriptlet failed, exit status 10
Cleaning up / removing...
   2:areplicate-2022.11.0-208         ################################# [100%]

[idkdba]

We got the same error as above. 

Failed to start service areplicate
Not all services have been started

2023.5+ not supported for RHEL 7 anymore? 

[john_wang]

Hello @idkdba ,

From 2023.5, RHEL 7 is not supported anymore. Same for versions 2023.11, 2024.5 and above versions.

Regards,

John.