> On 2011-08-23 22:27, C. Bensend wrote:
>>
>>> On 2011-08-23 21:48, C. Bensend wrote:
>>>>
>>>> Hey folks,
>>>>
>>>> So, I can't seem to find an SRPM for RHEL that actually matches
>>>> its checksum, which makes me a bit .. uneasy, given the nature
>>>> of the software.
>>>>
>>>> The RPMforge one fails its MD5 sum check. The second site listed
>>>> on clamav.net doesn't even have it that I could find.
>>>
>>> You have to import the repository's key, and then it works:
>>>
>>> $ wget http://pkgs.repoforge.org/clamav/clamav-0.97.2-1.rf.src.rpm
>>> $ wget http://apt.sw.be/RPM-GPG-KEY.dag.txt
>>> $ rpm --import RPM-GPG-KEY.dag.txt
>>> $ rpm -K clamav-0.97.2-1.rf.src.rpm
>>> clamav-0.97.2-1.rf.src.rpm: (sha1) dsa sha1 md5 gpg OK
>>>
>>> If you get something else maybe your download got corrupted.
>>
>> Thanks for that... However, I still get the same problem:
>>
>> rpm -ivh clamav-0.97.2-1.rf.src.rpm
>> 1:clamav warning: user dag does not exist - using root
>> warning: group dag does not exist - using root
>> ########################################### [100%]
>> error: unpacking of archive failed on file
>> /home/rpm/SOURCES/clamav-0.97.2.tar.gz;4e53fe2c: cpio: MD5 sum mismatch
>>
>> (I hand-transcribed that but I think it's accurate)
>
> I think this is because your RPM lacks SHA256 support, and the .src.rpm
> uses SHA256:
> https://bugzilla.redhat.com/show_bug.cgi?id=490613
>
> If I try your rpm -ihv command on a RHEL 5.x box indeed I get same error
> as you,
> if I try it on something modern like Fedora 14 its all OK.
>
> Just use rpm --no-md5 -ihv for now, you verified the digital signature
> with -K
> so it should be fine.
OK, I used --nomd5, that worked.
If the second site listed on clamav.net for the SRPMs is dead, can
it be removed?
Thanks so much!
Benny
--
"Open your door, or I open your wall."
-- Seen on an image on fukung.net
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
