[CentOS] md5sum errors in rpms

Tue Mar 4 10:40:33 UTC 2008
Peter Kjellstrom <cap at nsc.liu.se>

On Friday 29 February 2008, Hoy, Mark wrote:
> I just noticed that a couple of the updated RPMS have incorrect md5sums
> compared to the original email.

I can't comment on this.

> This exists on at least two mirrors:
> http://centos.take2hosting.com/5.1/updates/i386/RPMS/
> http://altruistic.lbl.gov/mirrors/centos/5.1/updates/i386/RPMS/
>
> # md5sum perl-*
> 7a3f9c4f7c35c23a0751f2b9fc196a21  perl-5.8.8-10.el5_0.2.i386.rpm
> 135fb1abc0f83fc85885b286ad268a7c
> perl-suidperl-5.8.8-10.el5_0.2.i386.rpm
>
> Is there a list of the md5sums for the entire updates directory?

Even better, rpms have integrated checksums and signatures:
$ rpm --checksig perl-5.8.8-10.el5_0.2.i386.rpm
perl-5.8.8-10.el5_0.2.i386.rpm: (sha1) dsa sha1 md5 gpg OK

/Peter

> Suggestions welcome.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.centos.org/pipermail/centos/attachments/20080304/28403219/attachment-0003.sig>