> I have, just now, done a commit to the cvs repository
> to separate signature check error from FileHash check error (I have
> attached the patch at the bottom of this message). Could you either
> check out a fresh cvs copy or apply this patch to your version? Btw,
> which version of Scripts do you use?
>
And the patch...
(hopefully gmail wont mangle it).
--
/Jonas
--- bin/InstallPackage 24 Aug 2007 23:15:57 -0000 1.47
+++ bin/InstallPackage 13 Sep 2007 11:34:10 -0000
@@ -296,9 +296,15 @@
then
Log_Question "Package signed with unknown signature. Unable to
verify package"
Ask_Continue "Continue install?"
- elif [ $result -eq 1 ] || [ $result -eq 3 ]
+ elif [ $result -eq 3 ]
then
- Log_Error "Invalid signature. Package has been modified"
+ Log_Error "Invalid signature. FileHash could not be verified."
+ Log_Error "Suspect package in
${goboPrograms}/$packagename/$packageversion"
+ exit 1
+ fi
+ elif [ $result -eq 1 ]
+ then
+ Log_Error "Invalid FileHash. Package has been modified"
Log_Error "Suspect package in
${goboPrograms}/$packagename/$packageversion"
exit 1
fi
_______________________________________________
gobolinux-devel mailing list
gobolinux-devel@lists.gobolinux.org
http://lists.gobolinux.org/mailman/listinfo/gobolinux-devel
