[Security-Discuss] updated openssl packages unsigned?

Michael Riss <[email protected]> Thu, 07 Sep 2006 10:19:32 +0200
Newsgroups gmane.linux.mandrake.security.general
Message-ID <[email protected]>
Hello everyone,

I just tried to install the openssl update packages
on 2006.0 (x86) and got this message:

The following packages have bad signatures:
/var/cache/urpmi/rpms/libopenssl0.9.7-0.9.7g-2.3.20060mdk.i586.rpm:
Missing signature ((none))
/var/cache/urpmi/rpms/libopenssl0.9.7-devel-0.9.7g-2.3.20060mdk.i586.rpm:
Missing signature ((none))
/var/cache/urpmi/rpms/openssl-0.9.7g-2.3.20060mdk.i586.rpm: Missing
signature ((none))
Do you want to continue installation ? (y/N)

When I do a

rpm -vv -K
var/cache/urpmi/rpms/libopenssl0.9.7-0.9.7g-2.3.20060mdk.i586.rpm

I get

D: Expected size:       573346 = lead(96)+sigs(180)+pad(4)+data(573066)
D:   Actual size:       573346
/var/cache/urpmi/rpms/libopenssl0.9.7-0.9.7g-2.3.20060mdk.i586.rpm:
    Header SHA1 digest: OK (cac6973a78d594628cbea17601b02ac235c39bad)
    MD5 digest: OK (b390e0e01bb5c820f85b053e0bed8e2c)
D: May free Score board((nil))

For comparison: ImageMagick-6.2.4.3-1.2.20060mdk.i586.rpm
(which installs without warning) has this output:

rpm -vv -K ImageMagick-6.2.4.3-1.2.20060mdk.i586.rpm
D: Expected size:        82706 = lead(96)+sigs(344)+pad(0)+data(82266)
D:   Actual size:        82706
D: opening  db environment /var/lib/rpm/Packages joinenv
D: opening  db index       /var/lib/rpm/Packages rdonly mode=0x0
D: locked   db index       /var/lib/rpm/Packages
D: opening  db index       /var/lib/rpm/Pubkeys rdonly mode=0x0
D:  read h#    1135 Header sanity check: OK
D: ========== DSA pubkey id 9aa8d0d0 22458a98 (h#1135)
ImageMagick-6.2.4.3-1.2.20060mdk.i586.rpm:
    Header V3 DSA signature: OK, key ID 22458a98
    Header SHA1 digest: OK (9f6a6223fbc71881afea2769e7f520a5dfe262f9)
    MD5 digest: OK (67628d15c15e7aa186bc6374880def43)
    V3 DSA signature: OK, key ID 22458a98
D: closed   db index       /var/lib/rpm/Pubkeys
D: closed   db index       /var/lib/rpm/Packages
D: closed   db environment /var/lib/rpm/Packages
D: May free Score board((nil))

Maybe someone can re-sign the openssl packages, please?

cu
Michi
____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________