Jon Peatfield wrote: ... > > I'm now puzzling over why the default seems to be to ship with all the > yum.repos.d/ entries having gpgcheck=0 surely the extra work of doing a > sig-check isn't so great is it? It's because java wasn't ever signed. In the past, we couldn't sign it without breaking it, so whenever that was turned on, it would yell and scream, and people couldn't update any package. With a new gnupg, we are now able to sign the java packages, so it's now a possiblity. We'll look into it in the next release. Troy -- __________________________________________________ Troy Dawson [log in to unmask] (630)840-6468 Fermilab ComputingDivision/LCSI/CSI DSS Group __________________________________________________