> What verification are you talking about, specifically? The term is overloaded
> in multiple places around rpm...
>
> If an unknown algorithm causes us to give an OK to an unverifiable signature
> then we obviously do have a rather bug someplace.
If xxx.rpm has been signed (Assume that the hash algorithm is hash_algo1 and
the encryption and decryption algorithm is ecdsa.) , and the current RPM does
not support hash_algo1. Run the `rpm -Kv xxx.rpm` command, no error message is
displayed and the value of `$?` is 0.
--
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3416#issuecomment-2446772260
You are receiving this because you are subscribed to this thread.
Message ID: <rpm-software-management/rpm/pull/3416/c2446772...@github.com>
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint
