Bug 490554 - corrupt SRPM available from mirrors
Summary: corrupt SRPM available from mirrors
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: jabberd
Version: rawhide
Hardware: All
OS: Linux
low
urgent
Target Milestone: ---
Assignee: Adrian Reber
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-03-16 23:17 UTC by Graham Leggett
Modified: 2009-03-17 10:47 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-03-17 06:46:33 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Graham Leggett 2009-03-16 23:17:54 UTC
The developement version of the jabberd v2.2.7.1 SRPM available on mirrors is corrupt:

[minfrin@chandler ~]$ rpmbuild --rebuild jabberd-2.2.7.1-1.fc11.src.rpm 
Installing jabberd-2.2.7.1-1.fc11.src.rpm
warning: InstallSourcePackage: Header V3 RSA/SHA256 signature: NOKEY, key ID d22e77f2
warning: user mockbuild does not exist - using root
warning: group mockbuild does not exist - using root
error: unpacking of archive failed on file /home/chandler/minfrin/rpm/SOURCES/jabberd;49bedd3d: cpio: MD5 sum mismatch
error: jabberd-2.2.7.1-1.fc11.src.rpm cannot be installed

Comment 1 Adrian Reber 2009-03-17 06:46:33 UTC
This sounds a lot like you are using a version of rpm which is too old, because the SRPM on my mirror works. Which version of RPM are you using?

Comment 2 Graham Leggett 2009-03-17 09:56:05 UTC
The version of RPM in use is the one currently shipped with the most recent and up-to-date version of Redhat Enterprise 5:

[minfrin@chandler ~]$ rpm -q -a | grep rpm
rpm-python-4.4.2.3-9.el5
rpm-libs-4.4.2.3-9.el5
rpm-4.4.2.3-9.el5
rpm-devel-4.4.2.3-9.el5

I don't see how the version of RPM would cause an MD5 sum mismatch, unless new versions of RPM are broken.

Comment 3 Adrian Reber 2009-03-17 10:07:14 UTC
Rawhide RPM changed to use stronger hashes. Old RPM version (like yours) cannot handle it anymore. See https://fedoraproject.org/wiki/Features/StrongerHashes

There are unofficial RPMs available which can help you:
http://people.redhat.com/mitr/sha256-rpm/

Comment 4 Graham Leggett 2009-03-17 10:12:33 UTC
Then this is a Redhat Enterprise bug. To support stronger hashes in Fedora but then not bother in RHEL5 is a serious case of dropping the ball.

Comment 5 Adrian Reber 2009-03-17 10:47:21 UTC
(In reply to comment #4)
> Then this is a Redhat Enterprise bug. To support stronger hashes in Fedora but
> then not bother in RHEL5 is a serious case of dropping the ball.  

But I cannot help you here. That is something which you can only solve by contacting Red Hat.


Note You need to log in before you can comment on or make changes to this bug.