Wrong Digest error

[mem_novell]

In my limited opinion you seem to be checking against some kind of content that is wrong. I would of expected you to see corruption elsewhere if proxy, i.e manual download of rpm.

You mean like I clearly stated in my 1st post ?

running rpm --checksig on an rpm downloaded via download.opensuse.org fails.

Here is another example:

mem@linux-682p:~/working> wget -c http://mirror.nyi.net/opensuse/update/11.1/rpm/noarch/kernel-docs-2.6.3-3.13.13.noarch.rpm
--2009-04-30 10:28:08--  http://mirror.nyi.net/opensuse/update/11.1/rpm/noarch/kernel-docs-2.6.3-3.13.13.noarch.rpm
Resolving mirror.nyi.net... 64.90.181.77
Connecting to mirror.nyi.net|64.90.181.77|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9112364 (8.7M) [text/plain]
Saving to: `kernel-docs-2.6.3-3.13.13.noarch.rpm'

100%[===================================================================>] 9,112,364   95.9K/s   in 92s

2009-04-30 10:29:40 (96.9 KB/s) - `kernel-docs-2.6.3-3.13.13.noarch.rpm' saved [9112364/9112364]

mem@linux-682p:~/working> rpm --checksig kernel-docs-2.6.3-3.13.13.noarch.rpm
kernel-docs-2.6.3-3.13.13.noarch.rpm: rsa sha1 MD5 PGP MD5 NOT OK
mem@linux-682p:~/working>

If someone could download the rpm, do a --checksig as well it may be enough to prove the proxy is corrupting the downloads.

[malcolmlewis]

Originally Posted by mem novell

If someone could download the rpm, do a --checksig as well it may be
enough to prove the proxy is corrupting the downloads.

Hi
Here you go, works fine for me.

malcolml@mizz-piggy:~$ wget -c
http://mirror.nyi.net/opensuse/update/11.1/rpm/noarch/kernel-docs-2.6.3-3.13.13.noarch.rpm
--2009-04-29 21:43:24--
http://mirror.nyi.net/opensuse/update/11.1/rpm/noarch/kernel-docs-2.6.3-3.13.13.noarch.rpm
Resolving mirror.nyi.net... 64.90.181.77 Connecting to
mirror.nyi.net|64.90.181.77|:80... connected. HTTP request sent,
awaiting response... 200 OK Length: 9112364 (8.7M) [text/plain] Saving
to: `kernel-docs-2.6.3-3.13.13.noarch.rpm'

100%[======================================>] 9,112,364    202K/s   in
41s

2009-04-29 21:44:06 (219 KB/s) - `kernel-docs-2.6.3-3.13.13.noarch.rpm'
saved [9112364/9112364]

malcolml@mizz-piggy:~$ rpm --checksig
kernel-docs-2.6.3-3.13.13.noarch.rpm
kernel-docs-2.6.3-3.13.13.noarch.rpm: rsa sha1 (md5) pgp md5 OK
malcolml@mizz-piggy:~$

--
Cheers Malcolm °¿° (Linux Counter #276890)
openSUSE 11.1 (i586) Kernel 2.6.27.21-0.1-pae
up 15:17, 2 users, load average: 0.05, 0.25, 0.36
ASUS eeePC 1000HE ATOM N280 1.66GHz | GPU Mobile 945GM/GMS/GME

[mem_novell]

Thankyou very much mate,
I shall take the server home tonight, repeat the test and post results.

[mem_novell]

My coworker opened a direct gateway to the internet for me to test.

Unfortunately, it still errors. Is it possible a dodgey cd could be the cause of this ?. We only have 1 set of cdr's here and they r a cheap brand.

I shall reburn the iso and test tonight either way.

linux-682p:~ # rpmdb --rebuilddb                             
error: rpmdbAdd: skipping h#      76 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#      99 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbNextIterator: skipping h#     945 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#     166 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284         
error: rpmdbNextIterator: skipping h#     389 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbNextIterator: skipping h#     576 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#     493 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284         
error: rpmdbNextIterator: skipping h#     490 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#     734 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284         
error: rpmdbNextIterator: skipping h#     343 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#     938 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284         
linux-682p:~ # zypper ref                                                                         
Repository '11.1' is up to date.                                                                  
Repository 'openSUSE-NonOSS-Add-on 11.1-0' is up to date.                                         
Repository 'openSUSE 11.1-0' is up to date.                                                       
All repositories have been refreshed.                                                             
linux-682p:~ # zypper up                                                                          
Loading repository data...                                                                        
Reading installed packages...                                                                     

The following packages are going to be upgraded:
--SNIP--
etrieving package bundle-lang-gnome-en-11.1-11.3.noarch (1/192), 9.7 M (17.7 M unpacked)
Retrieving: bundle-lang-gnome-en-11.1-11.3.noarch.rpm [done (77.5 K/s)]
Digest verification failed for bundle-lang-gnome-en-11.1-11.3.noarch.rpm. Expected b85b6ea393c8657a11df981a4ca5270d2065f26f, found 5f64284ad77796d30224eab25b504780e2dc5492. Continue? [yes/NO]:

[Knurpht]

One way or another your system seems corrupted. I've tested lots and lots to see if I could force my laptop to have your problem, just can't. If I was in your shoes, I'd reinstall from scratch.

[orba]

I'm getting this error as well though with a different package. I haven't done any updates in over two weeks and just tried today.

Retrieving repository 'Packman Repository' metadata [done]
Building repository 'Packman Repository' cache [done]
Repository 'openSUSE-11.1-Debug' is up to date.
Repository 'openSUSE-11.1-Non-Oss' is up to date.
Repository 'openSUSE-11.1-Oss' is up to date.
Digest verification failed for packages.DU.gz. Expected c2c47b2bea12224005074a4a1dff2abb66ec28f0, found 0e90c879133dc4ac7b63acd021c0969cc24d00e6. Continue? [yes/NO]: n
Retrieving repository 'openSUSE-11.1-Source' metadata [error]
Repository 'openSUSE-11.1-Source' is invalid.
packages.DU.gz has wrong checksum
Please check if the URIs defined for this repository are pointing to a valid repository.
Skipping repository 'openSUSE-11.1-Source' because of the above error.

I don't want to have to re-install since I'm using dial up and have some of the recent updates and patches installed, and don't want to download them again.

Will try caf4926's suggestion, or maybe wait a week and try refreshing again.

[orba]

Another small hurdle cleared. Thanks to caf4926's suggestions, I no longer get the error. I also read over the link about repository management and decided to delete source, as I don't need it, though it came with default install of 11.1 for 64 bit computer.