google-chrome-stable install on Mageia - "package has bad signature"

# Subject: google-chrome-stable install on Mageia - "package has bad signature"
# Date: Sun 18 Jun 16:58:50 BST 2023
# Summary: Installing google-chrome-stable in Mageia Linux the "normal" way results in a "package has bad signature".
#          However, downloading the RPM, verifying the signature and installing from downloaded RPM works OK.
#          Is this an issue with urpmi? Why does the "package has bad signature" error happen?


# Step 1: attempt "normal" install of google-chrome-stable

[user@localhost ~]$ /bin/sudo urpmi google-chrome-stable # Install Chrome


    http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-stable-114.0.5735.133-1.x86_64.rpm

The following package has bad signature:
/var/cache/urpmi/rpms/google-chrome-stable-114.0.5735.133-1.x86_64.rpm: Invalid Key ID (OK (RSA/SHA512, Tue 13 Jun 2023 01:42:59 BST, Key ID 4eb27db2a3b88b8b))
Do you want to continue installation ? (y/N)

# Abandoned this because of "bad signature" error.


#-------------------------------------------------------------------------------------------------------------------------
# searched and found: https://www.google.com/linuxrepositories/ and followed Google's documented steps:


# Step 2: use local directory for downloading from Google

[user@localhost ~]$ cd ~Downloads/google-chrome/


# Step 3: download Google's Linux signing key

[user@localhost google_chrome]$ wget https://dl-ssl.google.com/linux/linux_signing_key.pub
--2023-06-18 15:52:33--  https://dl-ssl.google.com/linux/linux_signing_key.pub
Resolving dl-ssl.google.com (dl-ssl.google.com)... 66.102.1.91, 66.102.1.93, 66.102.1.136, ...
Connecting to dl-ssl.google.com (dl-ssl.google.com)|66.102.1.91|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 14605 (14K) [application/octet-stream]
Saving to: ‘linux_signing_key.pub’

linux_signing_key.pub     100%[================================================>]  14.26K  --.-KB/s    in 0.003s

2023-06-18 15:52:33 (4.31 MB/s) - ‘linux_signing_key.pub’ saved [14605/14605]


# Step 4: import Google's Linux signing key

[user@localhost google_chrome]$ /bin/sudo rpm --import linux_signing_key.pub
[sudo] password for user:


# Step 5: verify Google's Linux signing key

[user@localhost google_chrome]$ rpm -qi gpg-pubkey-7fac5991-*
Name        : gpg-pubkey
Version     : 7fac5991
Release     : 4615767f
Architecture: (none)
Install Date: Fri 09 Jul 2021 20:10:47 BST
Group       : Public Keys
Size        : 0
License     : pubkey
Signature   : (none)
Source RPM  : (none)
Build Date  : Thu 05 Apr 2007 23:21:51 BST
Build Host  : localhost
Packager    : Google, Inc. Linux Package Signing Key <linux-packages-keymaster@google.com>
Summary     : Google, Inc. Linux Package Signing Key <linux-packages-keymaster@google.com> public key
Description :
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.16.1.3 (NSS-3)
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=Quqp
-----END PGP PUBLIC KEY BLOCK-----


# Step 6: verify signature on previous google-chrome-stable image - version 114.0.5735.106-1

[user@localhost google_chrome]$ rpm --checksig -v google-chrome-stable-114.0.5735.106-1.x86_64.rpm
google-chrome-stable-114.0.5735.106-1.x86_64.rpm:
    Header V4 RSA/SHA512 Signature, key ID a3b88b8b: OK
    Header SHA256 digest: OK
    Header SHA1 digest: OK
    Payload SHA256 digest: OK
    V4 RSA/SHA512 Signature, key ID a3b88b8b: OK
    MD5 digest: OK


# Step 7: download current google-chrome-stable image - version 114.0.5735.133-1

[user@localhost google_chrome]$ wget http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-stable-114.0.5735.133-1.x86_64.rpm
--2023-06-18 16:25:29--  http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-stable-114.0.5735.133-1.x86_64.rpm
Resolving dl.google.com (dl.google.com)... 172.217.16.238, 2a00:1450:4009:821::200e
Connecting to dl.google.com (dl.google.com)|172.217.16.238|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 99334072 (95M) [application/x-rpm]
Saving to: ‘google-chrome-stable-114.0.5735.133-1.x86_64.rpm’

google-chrome-stable-114.0.5735.133-1.x86_64.rpm                          100%[=============================>]  94.73M  8.44MB/s    in 11s

2023-06-18 16:25:40 (8.57 MB/s) - ‘google-chrome-stable-114.0.5735.133-1.x86_64.rpm’ saved [99334072/99334072]


# Step 8: verify signature on current google-stable image - version 114.0.5735.133-1

[user@localhost google_chrome]$ rpm --checksig -v  google-chrome-stable-114.0.5735.133-1.x86_64.rpm
google-chrome-stable-114.0.5735.133-1.x86_64.rpm:
    Header V4 RSA/SHA512 Signature, key ID a3b88b8b: OK
    Header SHA256 digest: OK
    Header SHA1 digest: OK
    Payload SHA256 digest: OK
    V4 RSA/SHA512 Signature, key ID a3b88b8b: OK
    MD5 digest: OK


# Step 9: install current latest google-chrome-stable ("normal" install)

[mpb@localhost google_chrome]$ /bin/sudo urpmi google-chrome-stable


    http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-stable-114.0.5735.133-1.x86_64.rpm

The following package has bad signature:
/var/cache/urpmi/rpms/google-chrome-stable-114.0.5735.133-1.x86_64.rpm: Invalid Key ID (OK (RSA/SHA512, Tue 13 Jun 2023 01:42:59 BST, Key ID 4eb27db2a3b88b8b))
Do you want to continue installation ? (y/N) N

# Abandoned because of "bad signature" error


# Step 10: install google-chrome-stable from downloaded copy

[mpb@z600-mageia8 google_chrome]$ /bin/sudo urpmi ./google-chrome-stable-114.0.5735.133-1.x86_64.rpm    # downloaded and verified local copy
[sudo] password for user:


installing google-chrome-stable-114.0.5735.133-1.x86_64.rpm from .
Preparing...                     #####################################################################
      1/1: google-chrome-stable  #####################################################################

# No error