Hide Forgot
Description of problem: When (re)signing, packages which are already signed with the same key cause the entire signing process to abort when it should simply skip over such packages. Version-Release number of selected component (if applicable): rpm-4.8.0-16.el6 How reproducible: Always (or almost so, there seems to be some other bug in the "identical signature" detection) Steps to Reproduce: 1. Grab a few rpms 2. rpm --addsign *.rpm 3. Add a few more rpms 4. rpm --addsign *.rpm Actual results: Step 4 aborts when it finds a package already signed with the same key, possibly leaving others unsigned. Expected results: All packages should be processed: packages with identical signature should be skipped and others (re)signed. Additional info: This is a regression from RHEL 6.0 due to a backporting error.
Okay it is always reproducable, the "other bug" was actually just missing error message on failure to replace original package instead of a bug in identical signature detection.
*** Bug 744880 has been marked as a duplicate of this bug. ***
Created attachment 527441 [details] Patch to skip already signed pkgs This patch makes rpm --resign to skip pkgs already signed with identical signature. I didn't check if some clean up should be done before continue so this may introduce memory leaks.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2011-1737.html