disable repo_gpgcheck as it raise too much issue being proxy

and CVE-2021-20271 is fixed in rpm

4 files changed, 19 insertions, 12 deletions

diff --git a/remi-modular.repo b/remi-modular.repo
index a77e64a..3047026 100644
--- a/remi-modular.repo
+++ b/remi-modular.repo
@@ -9,7 +9,8 @@ name=Remi's Modular repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/modular/$basearch/mirror
 enabled=1
 gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-modular-debuginfo]
@@ -19,7 +20,7 @@ name=Remi's Modular repository for Enterprise Linux VERSION - $basearch - debugi
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/debug-modular/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-modular-test]
@@ -29,7 +30,7 @@ name=Remi's Modular testing repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/modular-test/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-modular-test-debuginfo]
@@ -39,6 +40,6 @@ name=Remi's Modular testing repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/debug-modular-test/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
diff --git a/remi-release.spec b/remi-release.spec
index 23e84b5..65ee1b6 100644
--- a/remi-release.spec
+++ b/remi-release.spec
@@ -10,12 +10,12 @@ Name:           remi-release
 %if %{?rhel} == 9
 # Match point release version
 Version:        9.3
-Release:        1%{?dist}
+Release:        2%{?dist}
 %endif
 %if %{?rhel} == 8
 # Match point release version
 Version:        8.9
-Release:        1%{?dist}
+Release:        2%{?dist}
 %endif
 Summary:        YUM configuration for remi repository
 Summary(fr):    Configuration de YUM pour le dépôt remi
@@ -159,6 +159,10 @@ mkdir -p %{buildroot}/opt/remi
 
 
 %changelog
+* Wed Dec 20 2023 Remi Collet <remi@remirepo.net> - 8.9-2 and 9.3-2
+- disable repo_gpgcheck as it raise too much issue being proxy
+  and CVE-2021-20271 is fixed in rpm
+
 * Tue Dec 19 2023 Remi Collet <remi@remirepo.net> - 8.9-1 and 9.3-1
 - raise dependency on redhat-release >= 8.9 or 9.3
 
diff --git a/remi-safe.repo b/remi-safe.repo
index 6e9dd63..bf278de 100644
--- a/remi-safe.repo
+++ b/remi-safe.repo
@@ -9,7 +9,8 @@ name=Safe Remi's RPM repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/safe/$basearch/mirror
 enabled=1
 gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-safe-debuginfo]
@@ -17,5 +18,5 @@ name=Remi's RPM repository for Enterprise Linux VERSION - $basearch - debuginfo
 baseurl=http://rpms.remirepo.net/enterprise/VERSION/debug-remi/$basearch/
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
diff --git a/remi.repo b/remi.repo
index 2f54615..6e5adf8 100644
--- a/remi.repo
+++ b/remi.repo
@@ -9,7 +9,8 @@ name=Remi's RPM repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/remi/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-test]
@@ -20,7 +21,7 @@ mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/test/$basearch/mirror
 # WARNING: If you enable this repository, you must also enable "remi"
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-debuginfo]
@@ -28,7 +29,7 @@ name=Remi's RPM repository for Enterprise Linux VERSION - $basearch - debuginfo
 baseurl=http://rpms.remirepo.net/enterprise/VERSION/debug-remi/$basearch/
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-test-debuginfo]
@@ -36,6 +37,6 @@ name=Remi's test RPM repository for Enterprise Linux VERSION - $basearch - debug
 baseurl=http://rpms.remirepo.net/enterprise/VERSION/debug-test/$basearch/
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION