SP SRPM's

[Klingenstein, Nate]

Digests are not signatures.

I think of them as the same here since all I can compare the digest to is a string printed on a webpage hosted over TLS.

AFAIK that's the precise opposite of the intent, which is why I don't get signing a mirror list.  I want to verify the download, not a list of mirrors.

If it doesn't build the Apache module automatically, then the platform is broken and isn't worth wasting any time on.

A module came from somewhere and Apache was willing to load it.  There's an executable shibd that makes logs.  I have no idea where or how it's built or whether it's functional at this point.

Solaris is in that category.

Solaris is in a league of its own.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161117/7192e0aa/attachment.html>