Bernie, It looks OK to me. I have checked a fresh download and one I downloaded some time ago and both are the same: # rpm --checksig XFree86* XFree86-4.3.99.902-43.42.5.src.rpm: sha1 md5 gpg OK XFree86-libs.spm: sha1 md5 gpg OK # ls -l XFree86-4.3.99.902-43.42.5.src.rpm -r--r--r-- 1 root root 45701544 Apr 4 16:26 XFree86-4.3.99.902-43.42.5.src.rpm # md5sum XFree86-4.3.99.902-43.42.5.src.rpm 84ff8faf14323791622af3b5642277bf XFree86-4.3.99.902-43.42.5.src.rpm Bob On Thu, 26 May 2005, Bernie Hoefer wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
I noticed the x86_64 XFree86 source has a bad MD5 sum and GPG signature. I've check a mirror and get the same result. I hadn't seen anybody else mention it on the list, so I thought I'd just ask about it.
===
# wget ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/XFree86-4.3.99.902-43.42.5.src.rpm
# rpm --checksig XFree86-4.3.99.902-43.42.5.src.rpm XFree86-4.3.99.902-43.42.5.src.rpm: sha1 MD5 GPG NOT OK ===
- -- Bernie Hoefer PGP e-mail is welcome! Get my 1024 bit signature key from: http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x446A6F93. "The more I know, the more I realize how much I do not understand."
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFClVznckGmqURqb5MRAvMIAJ0SeG7+vHjTfcuDjv8e+1Kjcdz7cACfS2lc RKrDYAVtyTKkNgnC3tSdt9k= =bCPd -----END PGP SIGNATURE-----
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691