[Rpm-metadata] CVS access problem

[Jeff Johnson]

On Jun 28, 2006, at 1:03 PM, Hans-Peter Jansen wrote:

> Am Mittwoch, 28. Juni 2006 17:37 schrieb Jeff Johnson:
>> Hint:
>>
>> RPMTAG_PKGID (i.e. the header+payload MD5, aka RPMTAG_SIGMD5) is
>> universally available
>> in *.rpm packages, and (unlike the *.rpm file md5sum that was once
>> used by repo-md) is invariant
>> to signing events.
>>
>> For package tracking/hashing purposes, whether md5 collisions can be
>> generated Simply Does Not Matter.
>>
>> If you must track headers differently than packages, then the header
>> SHA1 can be computed on
>> the fly for the few remaining ancient rpm-3.0.x produced packages
>> that are encountered.
>>
>> I have no idea why the patch below is looking at RSAHEADER/DSAHEADER/
>> SIGPGP/SIGGPG tags,
>> what is needed is a strong guarantee of uniqueness for an identifier,
>> and that is RPMTAG_PKGID
>> (aka RPMTAG_SIGMD5).
>>
>> All dutifully delivered to this list way back when, and now
>> regurgitated again again again.
>
> Hrmpf, and where's the patch, then?
>

Where's what patch? I don't write in python by choice, and talking to  
python script kiddies
is (usually, thank you for simplifying the glop!) invariably pointless.

73 de Jeff