Hell all, I'm trying upgrade my machine FC3 to kde-redhat's KDE 3.4.3 using yum. Once yum finishes download the files, I get BAD GPG signature error in one of the file. So far, so good. I asked Rex (kde-redhat's maintainer) to check the files, and the files seem to be just fine. I cleared the yum cache and redownloaded the files. Same error (on different files, though.) I decided to check each and every file and did the following: [root@gilboa-work-dev packages]# rpm -K *.rpm > check.1 [root@gilboa-work-dev packages]# rpm -K *.rpm > check.2 [root@gilboa-work-dev packages]# rpm -K *.rpm > check.3 [root@gilboa-work-dev packages]# diff3 check.1 check.2 check.3 ====1 1:11c kdebase-3.4.3-1.0.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 GPG NOT OK 2:11c 3:11c kdebase-3.4.3-1.0.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 gpg OK ====1 1:18c kdelibs-3.4.3-1.0.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 GPG NOT OK 2:18c 3:18c kdelibs-3.4.3-1.0.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 gpg OK ==== 1:30,31c kdevelop-3.2.3-1.0.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 GPG NOT OK openoffice.org-1.1.5-0.1.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 GPG NOT OK 2:30,31c kdevelop-3.2.3-1.0.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 gpg OK openoffice.org-1.1.5-0.1.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 GPG NOT OK 3:30,31c kdevelop-3.2.3-1.0.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 GPG NOT OK openoffice.org-1.1.5-0.1.fc3.kde.i386.rpm: (sha1) dsa sha1 md5 gpg OK As you see, each time I run rpm -K (AKA --checksig) I get a different result. This leads me to believe that the machine is flaking on me. However, beside this weird yum problem, the machine is perfectly stable. Any ideas? Gilboa