BTW, as Robert suggested, I tested rpm upgrade (rpm -F),
the fix also works well

Preprae two version hello with bad signature

1. Install hello with version 1.0-r1.0

root@localhost:~# rpm -ivh --nodigest --nosignature hello-1.0-r1.0.corei7_64.rpm
Preparing... ########################################### [100%]
   1:hello ########################################### [100%]

root@localhost:~# rpm -F --verbose hello-1.0-r2.0.corei7_64.rpm
error: hello-1.0-r2.0.corei7_64.rpm: Header V4 DSA signature: BAD, key ID 8a0274fa

2. Upgrade hello with version 1.0-r2.0

root@localhost:~# rpm -F --verbose --nodigest --nosignature hello-1.0-r2.0.corei7_64.rpm
Preparing packages for installation...
hello-1.0-r2.0.corei7_64

root@localhost:~# rpm -q hello
hello-1.0-r2.0.corei7_64

//Hongxu

On 09/20/2016 04:15 PM, Hongxu Jia wrote:
Boot a target environment with rpm:

1). With option '--nodigest --nosignature', installing package
with bad signature is successful
======
root@localhost:~# rpm -ivh hello-bogus.rpm
error: hello-bogus.rpm: Header V4 DSA signature: BAD, key ID 09753bca

======

2). Without option '--nodigest --nosignature', installing package
with bad signature failed
======
root@localhost:~# rpm -ivh --nodigest --nosignature  hello-bogus.rpm
Preparing...                ########################################### [100%]
    1:hello                  ########################################### [100%]
======

BTW: the package with bad signature hello-bogus.rpm in
https://bugzilla.yoctoproject.org/show_bug.cgi?id=10308

//Hongxu

The following changes since commit 49a7839e602eac2c43415d9c8f17ad8315fd1da5:

   build-appliance-image: Create image in correct location (2016-09-19 08:58:10 
+0100)

are available in the git repository at:

   git://git.openembedded.org/openembedded-core-contrib hongxu/fix-rpm
   
http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=hongxu/fix-rpm

Hongxu Jia (1):
   rpm: make install with --nosignature and --nodigest work

  ...0001-system.h-query.c-support-nosignature.patch | 75 ++++++++++++++++++++--
  1 file changed, 71 insertions(+), 4 deletions(-)


--
_______________________________________________
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Reply via email to