http://qa.mandrakesoft.com/show_bug.cgi?id=3009
Product: grpmi
Component: grpmi
Summary: improve handling of "MD5 sum mismatch"
Version: 9.1-11mdk
Platform: PC
OS/Version: All
Status: UNCONFIRMED
Severity: normal
Priority: P2
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
Did a search on "md5" which found no existing bugs. AFAICT, the application in
question is grpmi, but I saw the error when installing from rpmdrake.
On signature check, I got an error like:
The signature of the package 'fluxbox-0.1.14-6mdk.i586.rpm' is not correct:
MD5 sum mismatch
Expected: 7e4859c86a7e4be85508c4863340f368
Saw : c9e8488fde20be2576d39f33afdde80e
Do you want to install it anyway?
(yes, the second line displays shifted, probably due to spaces in a proportional
font.)
This message will not appear, if you chose "Yes to all" beforehand on a GPG
signature mismatch. Since GPG signature are mainly about authentication and
often lacking on contrib package, but MD5 checksum are mainly about integrity,
it would be reasonable to handle them differently.
In other words: I am missing some explanation that the most probable reason for
this error means, my download was broken (I am aware that the text has to be
more general to apply to CD installs, too). And second, pressing "yes to all" on
a missing GPG signature shouldn't ignore failed checksums (i.e. if possible
differentiate between missing and invalid signatures).
Not sure if this should be targeted for 9.1, but please make sure it gets picked
up later if it is delayed for after-release.
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
