After 2022-06-20 we changed to a new rsa4096 signkey for the project.
%__gpg_reserved_space seems to default to 4096 bytes so that should fit. And
indeed, rpm --delsign leaves the size as is.
With [this
dump-rpm-headers.py](https://gist.github.com/koseki/9737a4490128bcb8b426c22a0b7c3885)
I get this diff between our delsigned OBS build and my local build:
```diff
--- dump-rpm-headers.py binaries/strip-nondeterminism-1.13.1-33.11.src.rpm
+++ dump-rpm-headers.py
binaries.nachbau/strip-nondeterminism-1.13.1-33.11.src.rpm
@@ -13,15 +13,15 @@
version: b'\x01'
reserved: b''
nindex: 7
- hsize: 4868
+ hsize: 4276
==== Signature Section - Index Entries ====
-[ 0] tag: 62 type: BIN offset:4852 count: 16 #
RPMTAG_HEADERSIGNATURES
+[ 0] tag: 62 type: BIN offset:4260 count: 16 #
RPMTAG_HEADERSIGNATURES
[ 1] tag: 269 type: STRING offset: 0 count: 1 # RPMSIGTAG_SHA1
[ 2] tag: 273 type: STRING offset: 41 count: 1 # Unknown
[ 3] tag: 1000 type: INT32 offset: 108 count: 1 # RPMSIGTAG_SIZE
[ 4] tag: 1004 type: BIN offset: 112 count: 16 # RPMSIGTAG_MD5
[ 5] tag: 1007 type: INT32 offset: 128 count: 1 #
RPMSIGTAG_PAYLOADSIZE
-[ 6] tag: 1008 type: BIN offset: 132 count:4720 #
RPMSIGTAG_RESERVEDSPACE
+[ 6] tag: 1008 type: BIN offset: 132 count:4128 #
RPMSIGTAG_RESERVEDSPACE
==== Signature Section - Data ====
[ 1] RPMSIGTAG_SHA1
b'34a3e2de398c3a6598b6b4b9d01d9a7fa96fda48'
@@ -42,43 +42,6 @@ RPMSIGTAG_RESERVEDSPACE
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
-0000*
```
So there is a difference of 592 bytes, which is around the size of a 4096-bit
sig.
--
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/2965#issuecomment-2005753254
You are receiving this because you are subscribed to this thread.
Message ID: <rpm-software-management/rpm/issues/2965/2005753...@github.com>_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint
