No problems.
You have likely appended your certificate to the immutable region, which SHOULD
work fine, but perhaps isn't exactly what you want. Note that you originally
asked for how to change a tag value, and at least one interpretation of your
request forces regeneration of the plaintext (aka the immutable region) used in
digests and signatures, and that adds layers of complexity to the operation.
RPM was designed as a secure delivery system from vendor to customer for a
reproducible build, not as some means to attach additional information to
package metadata (which is what everyone seems to want and expect these days).
So yes the available methods in rpm libraries are mind numbingly complex,
bridging digest/signature generation and verification, public key retrieval,
and more. The rpmtd layer, which attempts to cache values for performance in a
uniform manner, is designed for efficient retrieval, not for modification to
the underlying memory used by a loaded header.
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/478#issuecomment-410375225
_______________________________________________
Rpm-maint mailing list
[email protected]
http://lists.rpm.org/mailman/listinfo/rpm-maint
