FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora User

 
 
LinkBack Thread Tools
 
Old 06-19-2012, 11:54 AM
Panu Matilainen
 
Default running yum with --nosignature

On 06/03/2012 06:28 AM, JD wrote:

On 06/02/2012 08:02 PM, Edward M wrote:

On 06/02/2012 06:09 PM, JD wrote:

run rpm -ivh --nosignature xdfr-2.0.1.src.rpm
but rpm exits with error message:
error: xdfr-2.0.1.src.rpm: rpmReadSignature failed: sigh load: BAD
error: xdfe-2.0.1.src.rpm cannot be installed



I *think* the problem sits with the person/group who produced that
source file.
and they will need to add a fix, probably resign it.



I found an old dd image of fc14.
I mounted it, copied the src rpm to a tmp dir within the
mounted image, and chrooted to it.
I was able to use rpm2cpio to convert it to cpio.
The signature issue probably started in fc15???


F14 never received the security update (rpm-4.9.1.3, F14 was EOL by
then) which makes rpm a lot pickier about the exact package header
layout. A known higher profile case is Mono-packages from a Novell
repository failing the same way, at least in those cases there's
unexpected alignment in the signature header which causes the internal
sanity checks on header size to fail.


It'd be interesting to know what version of rpm was used the build and
sign the package exhibiting this issue.


- Panu -
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-19-2012, 01:10 PM
JD
 
Default running yum with --nosignature

On 06/19/2012 04:54 AM, Panu Matilainen wrote:

On 06/03/2012 06:28 AM, JD wrote:

On 06/02/2012 08:02 PM, Edward M wrote:

On 06/02/2012 06:09 PM, JD wrote:

run rpm -ivh --nosignature xdfr-2.0.1.src.rpm
but rpm exits with error message:
error: xdfr-2.0.1.src.rpm: rpmReadSignature failed: sigh load: BAD
error: xdfe-2.0.1.src.rpm cannot be installed



I *think* the problem sits with the person/group who produced that
source file.
and they will need to add a fix, probably resign it.



I found an old dd image of fc14.
I mounted it, copied the src rpm to a tmp dir within the
mounted image, and chrooted to it.
I was able to use rpm2cpio to convert it to cpio.
The signature issue probably started in fc15???


F14 never received the security update (rpm-4.9.1.3, F14 was EOL by
then) which makes rpm a lot pickier about the exact package header
layout. A known higher profile case is Mono-packages from a Novell
repository failing the same way, at least in those cases there's
unexpected alignment in the signature header which causes the internal
sanity checks on header size to fail.


It'd be interesting to know what version of rpm was used the build and
sign the package exhibiting this issue.


- Panu -

Ed Greshko replied that the rpm appeared to have been
created using a suse system.
But the case is rather moot now.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 

Thread Tools




All times are GMT. The time now is 02:45 AM.

VBulletin, Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright ©2007 - 2008, www.linux-archive.org