[kde] [Bug 503820] New: Incorrect Fingerprint for KDE F-Droid Repository

reportthebug bugzilla_noreply at kde.org
Tue May 6 03:14:43 BST 2025


https://bugs.kde.org/show_bug.cgi?id=503820

            Bug ID: 503820
           Summary: Incorrect Fingerprint for KDE F-Droid Repository
    Classification: I don't know
           Product: kde
           Version: unspecified
          Platform: Android
                OS: Other
            Status: REPORTED
          Severity: grave
          Priority: NOR
         Component: general
          Assignee: unassigned-bugs at kde.org
          Reporter: chris.seiferth at onenetbeyond.org
  Target Milestone: ---

The fingerprint for the KDE F-Droid repository
(`https://cdn.kde.org/android/fdroid/repo/`) appears to be incorrect or
outdated since some days, causing potential security or trust issues when
adding the repository via F-Droid.  

Steps to Reproduce
1. Add the KDE F-Droid repository (`https://cdn.kde.org/android/fdroid/repo/`)
to the F-Droid client.  
2. Observe the repository's signing fingerprint during the addition process.  

Expected Behavior
The fingerprint should match the officially listed value:  
`B3EBE10AFA6C5C400379B34473E843D686C61AE6AD33F423C98AF903F056523F`  
(This is confirmed on the KDE Community Android/F-Droid page.)  

Actual Behavior
The fingerprint displayed or detected by F-Droid differs from the expected
value, leading to warnings or failures when verifying the repository's
authenticity.  

Additional Details
- F-Droid Client Version: 1.22.0
- Repository URL: `https://cdn.kde.org/android/fdroid/repo/`  
- Location of Issue: F-Droid client when adding the repository.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the Unassigned-bugs mailing list