Created attachment 527292 [details]
Patch which partially fixes the signing already signed packages problem.

rpm-4.8.0 has backported broken change c0aad81e9b17afcbea4008485d354673495eb148 from rpm.org rpm git. That was supposed to fix #488953 but actually introduced even worse regression.

When you try to sign packages in directory like:

rpm --resign *.rpm

rpm will exit with result code 0 when it finds first package which is correctly signed. This leaves very big possibility that you have dir of packages, only first ones being signed.

rpm should actually only skip without modifications already singed packages.

I attach patch which fixes the problem partially by removing the false exit but it doesn't fix the issue completely because even with patch rpm touches packages which were already signed. Correct behaviour would be not to touch package which have already been correctly signed.