up2date generating an error when trying to install lynx

[Adrian Likins]

On Fri, Jan 16, 2004 at 01:14:38PM -0700, Tyler larson wrote:
> On Fri, 2004-01-16 at 11:27, Adrian Likins wrote:
> 
> > 	Well, thats a new one. Havent seen it before but
> > it definately looks like you got a corrupted header downloaded
> > and it blew up in gzip. 
> > 
> > 	Yay, more exceptions to catch! ;->
> > 
> 
> While I'm all for catching exceptions and handling them without
> crashing, I think that this is yet another manifestation of a deeper
> problem that (a) absolutely has to be addressed, and (b) will
> effectively solve the up2date problems most people have been having.
> 
> That is, up2date doesn't verify that an RPM has been downloaded
> correctly. It just blindly attempts to install whatever it gets. It's
> particularly common for people who download from the default (redhat)
> repository to get corrupted/incomplete RPMs, so errors are showing up
> everywhere during the install process.
>
	Thats not really true. Theres code to try to verify
the headers look okay, then rpm itself does md5 and sha1 verification
on the headers.

	up2date also does a md5 check and a gpg verification on
the packages it downloads and will spit errors about it. 

If you see "rpm.error: public key not trusted" thats the check
catching... The "getRealHeader" stuff probabaly needs an
exception handler to retry since that code gets triggered 
a lot on apt/yum sources but not rhn. I'll take a look...
Most of the retry code was written before that little
kluge got added in...

 
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=108652
> 
> That's not to say that we shouldn't fix the the problems as they
> show up that are making up2date crash. But we can't just ignore the
> underlying fault, either.
> 
	Current problem seems be getting lots of crap
from the servers. There are hooks to retry in these 
cases. Some of the apt/yum/etc cases probabably need
to made more robust (aka, the getRealHeader cases
above). 

	I'll take a look at it, but patches would
be great, since my head is in RHEL stuff atm...

Adrian