Jon Peatfield wrote:
...
> 
> I'm now puzzling over why the default seems to be to ship with all the 
> yum.repos.d/ entries having gpgcheck=0 surely the extra work of doing a 
> sig-check isn't so great is it?

It's because java wasn't ever signed.  In the past, we couldn't sign it 
without breaking it, so whenever that was turned on, it would yell and 
scream, and people couldn't update any package.
With a new gnupg, we are now able to sign the java packages, so it's now 
a possiblity.  We'll look into it in the next release.
Troy
-- 
__________________________________________________
Troy Dawson  [log in to unmask]  (630)840-6468
Fermilab  ComputingDivision/LCSI/CSI DSS Group
__________________________________________________