On 2011-08-23 22:27, C. Bensend wrote: > >> On 2011-08-23 21:48, C. Bensend wrote: >>> >>> Hey folks, >>> >>> So, I can't seem to find an SRPM for RHEL that actually matches >>> its checksum, which makes me a bit .. uneasy, given the nature >>> of the software. >>> >>> The RPMforge one fails its MD5 sum check. The second site listed >>> on clamav.net doesn't even have it that I could find. >> >> You have to import the repository's key, and then it works: >> >> $ wget http://pkgs.repoforge.org/clamav/clamav-0.97.2-1.rf.src.rpm >> $ wget http://apt.sw.be/RPM-GPG-KEY.dag.txt >> $ rpm --import RPM-GPG-KEY.dag.txt >> $ rpm -K clamav-0.97.2-1.rf.src.rpm >> clamav-0.97.2-1.rf.src.rpm: (sha1) dsa sha1 md5 gpg OK >> >> If you get something else maybe your download got corrupted. > > Thanks for that... However, I still get the same problem: > > rpm -ivh clamav-0.97.2-1.rf.src.rpm > 1:clamav warning: user dag does not exist - using root > warning: group dag does not exist - using root > ########################################### [100%] > error: unpacking of archive failed on file > /home/rpm/SOURCES/clamav-0.97.2.tar.gz;4e53fe2c: cpio: MD5 sum mismatch > > (I hand-transcribed that but I think it's accurate)
I think this is because your RPM lacks SHA256 support, and the .src.rpm uses SHA256: https://bugzilla.redhat.com/show_bug.cgi?id=490613 If I try your rpm -ihv command on a RHEL 5.x box indeed I get same error as you, if I try it on something modern like Fedora 14 its all OK. Just use rpm --no-md5 -ihv for now, you verified the digital signature with -K so it should be fine. Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
