MD5 sum mismatch in httpd-2.2.11-10.src.rpm

[Todd Zullinger]

Peter Taylor wrote:
> Downloaded httpd-2.2.11-10.src.rpm from:
> http://download.fedora.redhat.com/pub/fedora/linux/releases/test/12-Alpha/Fedora/source/SRPMS/httpd-2.2.11-10.src.rpm
>
> rpm -Uvh httpd-2.2.11-10.src.rpm
> warning: httpd-2.2.11-10.src.rpm: Header V3 RSA/SHA1 signature: NOKEY, key
> ID 57bbccba
>    1:httpd                  warning: user mockbuild does not exist - using
> root
> warning: group mockbuild does not exist - using root
> ########################################### [100%]
> error: unpacking of archive failed on file
> /usr/src/redhat/SOURCES/README.confd;4abbe9a7: cpio: MD5 sum mismatch

You don't say what version of Fedora this is on (or if it is even
Fedora and not RHEL/CentOS), so I can only guess that you're not doing
this on Fedora 11 or newer.

The problem is that packages in Fedora are now using sha256 hashes
instead of md5.  Older versions of rpm are not compatible with the
stronger hashes, unfortunately.

You have a few ways to work around this.  A few off the top of my
head:

1) Update your mock builder to a newer rpm (a little searching will
   yield Fedora 10 and RHEL/CentOS 5 packages)

2) Rebuild the httpd srpm from F12-Alpha on an F11 or newer box

3) Build an httpd srpm from the devel branch of Fedora's CVS.
   Something like:

   $ cvs -d:pserver:anonymous at cvs.fedoraproject.org:/cvs/pkgs co httpd
   $ cd httpd/devel/ && make srpm

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Do you think there's a God?"
"Well, SOMEbody's out to get me!"
    -- Calvin and Hobbes

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 542 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20090925/81d5975f/attachment-0001.sig>