Re: [Security-Discuss] updated openssl packages unsigned?

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--Apple-Mail-9--1055526913
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed


On Sep-7-06, at 2:19 AM, Michael Riss wrote:

> I just tried to install the openssl update packages
> on 2006.0 (x86) and got this message:
>
> The following packages have bad signatures:
> /var/cache/urpmi/rpms/libopenssl0.9.7-0.9.7g-2.3.20060mdk.i586.rpm:
> Missing signature ((none))
> /var/cache/urpmi/rpms/libopenssl0.9.7- 
> devel-0.9.7g-2.3.20060mdk.i586.rpm:
> Missing signature ((none))
> /var/cache/urpmi/rpms/openssl-0.9.7g-2.3.20060mdk.i586.rpm: Missing
> signature ((none))
> Do you want to continue installation ? (y/N)
>
> When I do a
>
> rpm -vv -K
> var/cache/urpmi/rpms/libopenssl0.9.7-0.9.7g-2.3.20060mdk.i586.rpm
>
> I get
>
> D: Expected size:       573346 = lead(96)+sigs(180)+pad(4)+data 
> (573066)
> D:   Actual size:       573346
> /var/cache/urpmi/rpms/libopenssl0.9.7-0.9.7g-2.3.20060mdk.i586.rpm:
>     Header SHA1 digest: OK (cac6973a78d594628cbea17601b02ac235c39bad)
>     MD5 digest: OK (b390e0e01bb5c820f85b053e0bed8e2c)
> D: May free Score board((nil))
>
> For comparison: ImageMagick-6.2.4.3-1.2.20060mdk.i586.rpm
> (which installs without warning) has this output:
>
> rpm -vv -K ImageMagick-6.2.4.3-1.2.20060mdk.i586.rpm
> D: Expected size:        82706 = lead(96)+sigs(344)+pad(0)+data(82266)
> D:   Actual size:        82706
> D: opening  db environment /var/lib/rpm/Packages joinenv
> D: opening  db index       /var/lib/rpm/Packages rdonly mode=0x0
> D: locked   db index       /var/lib/rpm/Packages
> D: opening  db index       /var/lib/rpm/Pubkeys rdonly mode=0x0
> D:  read h#    1135 Header sanity check: OK
> D: ========== DSA pubkey id 9aa8d0d0 22458a98 (h#1135)
> ImageMagick-6.2.4.3-1.2.20060mdk.i586.rpm:
>     Header V3 DSA signature: OK, key ID 22458a98
>     Header SHA1 digest: OK (9f6a6223fbc71881afea2769e7f520a5dfe262f9)
>     MD5 digest: OK (67628d15c15e7aa186bc6374880def43)
>     V3 DSA signature: OK, key ID 22458a98
> D: closed   db index       /var/lib/rpm/Pubkeys
> D: closed   db index       /var/lib/rpm/Packages
> D: closed   db environment /var/lib/rpm/Packages
> D: May free Score board((nil))
>
> Maybe someone can re-sign the openssl packages, please?

Yup, this error was entirely my fault.  New packages have been signed  
(same release number) and are being uploaded right away.

-- 
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}
mysql> SELECT * FROM users WHERE clue > 0;
Empty set (0.00sec)




--Apple-Mail-9--1055526913
content-type: application/pgp-signature; x-mac-type=70674453;
	name=PGP.sig
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFFADBuLrxeMv7jCtQRAjzUAJ9yJ46qJnG317BjrRiQNioBeO5G5gCgjokZ
B8tADL6jD1GQ7yODKzIR4hc=
=8CTS
-----END PGP SIGNATURE-----

--Apple-Mail-9--1055526913--