[Security-Discuss] updated openssl packages unsigned?
Michael Riss <[email protected]> Thu, 07 Sep 2006 10:19:32 +0200
| Newsgroups | gmane.linux.mandrake.security.general |
|---|---|
| Message-ID | <[email protected]> |
Hello everyone,
I just tried to install the openssl update packages
on 2006.0 (x86) and got this message:
The following packages have bad signatures:
/var/cache/urpmi/rpms/libopenssl0.9.7-0.9.7g-2.3.20060mdk.i586.rpm:
Missing signature ((none))
/var/cache/urpmi/rpms/libopenssl0.9.7-devel-0.9.7g-2.3.20060mdk.i586.rpm:
Missing signature ((none))
/var/cache/urpmi/rpms/openssl-0.9.7g-2.3.20060mdk.i586.rpm: Missing
signature ((none))
Do you want to continue installation ? (y/N)
When I do a
rpm -vv -K
var/cache/urpmi/rpms/libopenssl0.9.7-0.9.7g-2.3.20060mdk.i586.rpm
I get
D: Expected size: 573346 = lead(96)+sigs(180)+pad(4)+data(573066)
D: Actual size: 573346
/var/cache/urpmi/rpms/libopenssl0.9.7-0.9.7g-2.3.20060mdk.i586.rpm:
Header SHA1 digest: OK (cac6973a78d594628cbea17601b02ac235c39bad)
MD5 digest: OK (b390e0e01bb5c820f85b053e0bed8e2c)
D: May free Score board((nil))
For comparison: ImageMagick-6.2.4.3-1.2.20060mdk.i586.rpm
(which installs without warning) has this output:
rpm -vv -K ImageMagick-6.2.4.3-1.2.20060mdk.i586.rpm
D: Expected size: 82706 = lead(96)+sigs(344)+pad(0)+data(82266)
D: Actual size: 82706
D: opening db environment /var/lib/rpm/Packages joinenv
D: opening db index /var/lib/rpm/Packages rdonly mode=0x0
D: locked db index /var/lib/rpm/Packages
D: opening db index /var/lib/rpm/Pubkeys rdonly mode=0x0
D: read h# 1135 Header sanity check: OK
D: ========== DSA pubkey id 9aa8d0d0 22458a98 (h#1135)
ImageMagick-6.2.4.3-1.2.20060mdk.i586.rpm:
Header V3 DSA signature: OK, key ID 22458a98
Header SHA1 digest: OK (9f6a6223fbc71881afea2769e7f520a5dfe262f9)
MD5 digest: OK (67628d15c15e7aa186bc6374880def43)
V3 DSA signature: OK, key ID 22458a98
D: closed db index /var/lib/rpm/Pubkeys
D: closed db index /var/lib/rpm/Packages
D: closed db environment /var/lib/rpm/Packages
D: May free Score board((nil))
Maybe someone can re-sign the openssl packages, please?
cu
Michi
____________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________