[CentOS] Yum corrupting RPMs

[Ray Van Dolson]

On Mon, Aug 25, 2008 at 10:54:05AM +0930, Tom Lanyon wrote:
> Hi list,
>
> Trying to upgrade someone's workstation here to 5.2 (was installed from a 
> 5.0 DVD I think).
>
> The RPMs on our internal mirror are in-tact and pass a 'rpm --checksig' 
> test, yet when I run a 'yum upgrade' a large portion of them are corrupted 
> and fail the GPG check.
>
> This seems to be isolated to yum, as downloading the RPM directly via FTP 
> with wget or lftpget provides an RPM that *does* pass the GPG check.
>
> I have upgraded key packages to the latest version (eg. yum upgrade 'yum*') 
> and tried again to no avail.
>
> Anyone seen this before?

How are you sync'ing the RPM's on your internal mirror?  Do you run
createrepo locally to generate the metadata yourself or just rely on
the mirror's information?

Ray