[Rpm-maint] [rpm-software-management/rpm] Check the validity of hash algo (PR #3416)

[xujing]

> What verification are you talking about, specifically? The term is overloaded in multiple places around rpm...
> 
> If an unknown algorithm causes us to give an OK to an unverifiable signature then we obviously do have a rather bug someplace.

If xxx.rpm has been signed (Assume that the hash algorithm is hash_algo1 and the encryption and decryption algorithm is ecdsa.) , and the current RPM does not support hash_algo1. Run the `rpm -Kv xxx.rpm` command, no error message is displayed and the value of `$?` is 0.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3416#issuecomment-2446772260
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/3416/c2446772260 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20241030/06786c05/attachment.html>