pmatilai left a comment (rpm-software-management/rpm#3469)
> Part of the problem here is that I was given a diagnostic listing of tags and
> region markers from an RPM header as an example and while an "rpmdump" tool
> was mentioned I haven't actually found the exact executable or command to
> replicate that so I can distinguish well-formed RPM headers from malformed
> headers.
`rpmdump` is only part of rpm since >= 4.20, located in /usr/lib/rpm/rpmdump,
but should be easy to compile against older rpm versions too if you need. The
source in the tools/ directory of the rpm repo.
> The implementation of this function does the IMA signature insertion after
> inserting the signed header.
Right - there you have the problem, look no further. As for code organization
and all that, I don't know these signing tools enough to comment.
BTW a closed ticket is not the best place for questions - if you have more,
please open a new topic in
https://github.com/rpm-software-management/rpm/discussions.
--
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/3469#issuecomment-2723456421
You are receiving this because you are subscribed to this thread.
Message ID: <rpm-software-management/rpm/issues/3469/2723456...@github.com>
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
https://lists.rpm.org/mailman/listinfo/rpm-maint
