Re: upgrading from rh7.2 to 7.3 -- dependency problem

On Mon, Aug 12, 2002 at 01:16:15AM -0400, Jef Spaleta wrote:
> The GPG sig checking shouldnt be all that difficult to do.  Poking
> around a little it looks like the version of rpm in redhat 7.3 doesnt
> have gpg sig verification enabled...just md5 checking. But my limbo
> system seems to know about gpg sigs.  I'd imagine the best way to do it
> would be to run the rpm --checksig command after the download
> step...right before the upgrade/install attempt.  But like I said im not
> sure GPG is working in an rpm version prior to limbo.

Defiantly worth a look!

> The big issue is whether or not you have grab try to install vendor keys
> on the gpg keyring.  If you don't worry about that, just have a
> verification step after download.

Maybe I am wrong, but without the vendor key it will always fail...?

> On a related note.  Can you make a little logic change in the version
> nunber ordering so that something like 1.0rc3 is understood as being an
> older version to 1.0.  

I think this is a good idea, but I am not sure how to implement it reliably.
What would the difference between a 1.0rc3, 1.0pre3, 1.0a3 be to the code?
Also remember that alpha chars are going to be parsed char by char, not a
string like numeric numbers. This means that this modification to Valgor may 
make Valgor slower (which if everyone remembers < 1.0 it was VERY SLOW!) and 
less reliable.

To determine this, I will need to look at the code to see if there is even a
way of doing this. Also, I will need to know the possible strings that 
determine a pre-release (ie. rc, pre,...).

Greg
-- 
Greg Kurtzer
[email protected]
http://www.runlevelzero.net
LINUX,... The choice of a GNU generation!
:wq