summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFlorian Festi <ffesti@redhat.com>2019-07-18 07:45:53 +0200
committerPanu Matilainen <pmatilai@redhat.com>2020-03-26 11:57:58 +0200
commit3ff51fabb32a21d6b0815c6261704bc0d52cfb1e (patch)
tree802ba5175f02993d50e29a9cd7a95c6055c18c40
parent1478c8700f39e17b059c90a90cc77b8f1510ec84 (diff)
downloadrpm-3ff51fabb32a21d6b0815c6261704bc0d52cfb1e.tar.gz
rpmsign man page: Add line about rpmsign requiring a valid checksum
and the limitations in FIPS mode (cherry picked from commit be3347b5bff6142e86e533174fe0ec352405d159) (cherry picked from commit d615098e4ea8937dd63291f6b2008253733632b7)
-rw-r--r--doc/rpmsign.83
1 files changed, 3 insertions, 0 deletions
diff --git a/doc/rpmsign.8 b/doc/rpmsign.8
index 80ffb6a32..d895a3b8c 100644
--- a/doc/rpmsign.8
+++ b/doc/rpmsign.8
@@ -21,6 +21,9 @@ options generate and insert new signatures for each package
existing signatures. There are two options for historical reasons,
there is no difference in behavior currently.
+To create a signature rpm needs to verify the package's checksum. As a result
+packages with a MD5/SHA1 checksums cannot be signed in FIPS mode.
+
\fBrpm\fR \fB--delsign\fR \fB\fIPACKAGE_FILE\fB\fR\fI ...\fR
.PP