[CentOS] md5sum errors in rpms

Tue Mar 18 17:22:36 UTC 2008
Hoy, Mark <mhoy at securify.com>

Thanks Peter, I didn't know about the --checksig option of rpm.  

Mark

> -----Original Message-----
> From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On
> Behalf Of Peter Kjellstrom
> Sent: Tuesday, March 04, 2008 2:41 AM
> To: centos at centos.org
> Subject: Re: [CentOS] md5sum errors in rpms
> 
> On Friday 29 February 2008, Hoy, Mark wrote:
> > I just noticed that a couple of the updated RPMS have incorrect
md5sums
> > compared to the original email.
> 
> I can't comment on this.
> 
> > This exists on at least two mirrors:
> > http://centos.take2hosting.com/5.1/updates/i386/RPMS/
> > http://altruistic.lbl.gov/mirrors/centos/5.1/updates/i386/RPMS/
> >
> > # md5sum perl-*
> > 7a3f9c4f7c35c23a0751f2b9fc196a21  perl-5.8.8-10.el5_0.2.i386.rpm
> > 135fb1abc0f83fc85885b286ad268a7c
> > perl-suidperl-5.8.8-10.el5_0.2.i386.rpm
> >
> > Is there a list of the md5sums for the entire updates directory?
> 
> Even better, rpms have integrated checksums and signatures:
> $ rpm --checksig perl-5.8.8-10.el5_0.2.i386.rpm
> perl-5.8.8-10.el5_0.2.i386.rpm: (sha1) dsa sha1 md5 gpg OK
> 
> /Peter
> 
> > Suggestions welcome.