diff --git a/builddep.sh b/builddep.sh index c01ab89d0..9ad4fa864 100755 --- a/builddep.sh +++ b/builddep.sh @@ -240,8 +240,7 @@ if ! $GREP -q '%_gpg_name' $MACROS 2>/dev/null; then fi # Sign the rpms that are not already signed. The "standard input reopened" warnings are normal. -# First sign all non RH9 RPMS with DEFAULT algorithm, if running this script on RH7 or RH8, -# most likely it will be SHA1 +# First, sign all non RH9 RPMS with DEFAULT algorithm, if running this script on RH7, most likely it will be SHA1 echo "===> Signing RPMs with DEFAULT algorithm..." $XCATCOREDIR/build-utils/rpmsign.exp `find . -type f -name '*.rpm' ! -path './rh9/*'` | grep -v -E '(already contains identical signature|was already signed|rpm --quiet --resign|WARNING: standard input reopened)' @@ -250,7 +249,7 @@ if ! $GREP -q '%_gpg_sign_cmd' $MACROS 2>/dev/null; then echo '%__gpg_sign_cmd %{__gpg} gpg --force-v3-sigs --batch --verbose --no-armor --passphrase-fd 3 --no-secmem-warning -u "%{_gpg_name}" -sbo %{__signature_filename} --digest-algo sha256 %{__plaintext_filename}' >> $MACROS fi -# Second sign all RH9 RPMS with SHA256 algorithm +# Second, sign all RH9 RPMS with SHA256 algorithm echo "===> Signing RH9 RPMs with SHA265 algorithm..." $XCATCOREDIR/build-utils/rpmsign.exp `find rh9 -type f -name '*.rpm'` | grep -v -E '(already contains identical signature|was already signed|rpm --quiet --resign|WARNING: standard input reopened)'