--addsign overwriting original build signature

[Paul Taylor equifax com]

Hi,

When a collegue attempts to add a signature (with --addsign) to a package I
have previously
signed at build time, the original signature is lost (replaced).

Subsequent calls to --addsign do indeed result in multiple signatures,
however
the first call always seems to destroy the orignal signature, whether it
was created at build
time or with --resign.

Currently running rpm-4.0.2 with gpg-1.0.5 on Solaris 8.

Any thoughts ?

Regards

Paul Taylor




This message contains information from Equifax, Inc. which may be
confidential and privileged.  If you are not an intended recipient, please
refrain from any disclosure, copying, distribution or use of this
information and note that such actions are prohibited.  If you have
received this transmission in error, please notify by e-mail
postmaster@equifax.com.