[Varnish] #906: Varnish 2.1.x packages for el5 are not signed

[Max Parmer]

On Tue, 2011-04-26 at 07:40 +0000, Varnish wrote:
> #906: Varnish 2.1.x packages for el5 are not signed
> ------------------------------+---------------------------------------------
>  Reporter:  maxp              |        Type:  defect
>    Status:  new               |    Priority:  high  
> Milestone:                    |   Component:  build 
>   Version:  trunk             |    Severity:  major 
>  Keywords:  gpg rpm security  |  
> ------------------------------+---------------------------------------------
> 
> Comment(by tfheen):
> 
>  The reason for the RPMs being unsigned is signing them breaks RPM and
>  corrupts the RPM database.  Now, this is of course a bug in, but rather
>  than breaking machines we distribute unsigned packages.
> 
>  I'm unlikely to change this, but will leave the bug open for now.
> 

Could you tell me more about how it breaks? I am willing to help fix
this issue.

-- 
Max Parmer
CIS UNIX
503.725.9157