Leonard,
Thanks for the url. It looks like I made a change in the "Lead" which,
accroding to 'Maximum RPM' isn't used for much ...
Thanks again
Richard
==
Hi Richard,
> I thought that rpm's --checksig ran md5sum and gpg on the entire rpm file
> except the embedded signatures) but that
Hi Richard,
> I thought that rpm's --checksig ran md5sum and gpg on the entire rpm file
> except the embedded signatures) but that doesn't seem to be the case,
> else rpm --checksig would have 'seen' the change.
The header is not included in the file length tag, so I presume it also isn't
chec
Byte 0x46 is an arbitrary byte I chose.
I thought that rpm's --checksig ran md5sum and gpg on the entire rpm file
except the embedded signatures) but that doesn't seem to be the case,
else rpm --checksig would have 'seen' the change.
Richard
>
>
> >
> > The rpm --checksig verification fun
On Thu, Aug 01, 2002 at 01:28:41PM -0700, [EMAIL PROTECTED] wrote:
>
> The rpm --checksig verification function appears to be broken.
> (I am using RH 7.3 and rpm-4.0.4-7x.18)
> I changed one byte in an rpm file using hexedit then ran rpm --checksig.
> rpm sitll printed out: "md5 gpg OK"
[...]
>
The rpm --checksig verification function appears to be broken.
(I am using RH 7.3 and rpm-4.0.4-7x.18)
I changed one byte in an rpm file using hexedit then ran rpm --checksig.
rpm sitll printed out: "md5 gpg OK"
Here is what I did:
cp xchat-1.8.9-1.73.0.i386.rpm xchat-1.8.9-1.73.0.i386.rpm.org
