new question on mediacheck

Paul Howarth paul at city-fan.org
Sat Mar 25 16:08:30 UTC 2006


On Sat, 2006-03-25 at 11:16 +0530, Anil Kumar Sharma wrote:
> UC, In the updates that are announced by fedora-announce-list, each
> file's sha1sum is available. 
> Can somebody point where the sha1sum of individual file can be found
> for the files included in the release iso's.
> I just didn't see / notice this simple thing.

There isn't any data of that nature.

If you really want to check the authenticity of RPM packages, you can
use their built-in GPG signatures.

$ rpm --checksig /path/to/some.rpm

You may need to import the GPG keys used to sign the packages first if
you haven't already done so.

Paul.




More information about the fedora-list mailing list