Various proprietary packages in the wild have subtly malformed data
in the signature header, in particular wrt the immutable region size,
presumably from using some in-house/3rd party signing tools which do
not understand the immutable region business at all. This can prevent
resigning and signature deletion on such packages due to the more
thorough checking that rpmsign does.
As the old wisdom goes, be liberal in what you accept... we can easily
work around the crud by just taking a fresh copy of the contents that
are legit as such (otherwise the package would be uninstallable).
You can view, comment on, or merge this pull request online at:
https://github.com/rpm-software-management/rpm/pull/1330
-- Commit Summary --
* Work around buggy signature region preventing resigning (RhBug:1851508)
-- File Changes --
M sign/rpmgensig.c (12)
-- Patch Links --
https://github.com/rpm-software-management/rpm/pull/1330.patch
https://github.com/rpm-software-management/rpm/pull/1330.diff
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1330
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint
