On Sat, 2006-03-25 at 11:16 +0530, Anil Kumar Sharma wrote: > UC, In the updates that are announced by fedora-announce-list, each > file's sha1sum is available. > Can somebody point where the sha1sum of individual file can be found > for the files included in the release iso's. > I just didn't see / notice this simple thing. There isn't any data of that nature. If you really want to check the authenticity of RPM packages, you can use their built-in GPG signatures. $ rpm --checksig /path/to/some.rpm You may need to import the GPG keys used to sign the packages first if you haven't already done so. Paul.
