From 4d599a97896f34f55b4b04f6fbd47cb1a730a9be Mon Sep 17 00:00:00 2001
From: Florian Festi <ffesti@redhat.com>
Date: Apr 23 2020 14:26:58 +0000
Subject: rpmsign man page: Add line about rpmsign requiring a valid checksum


and the limitations in FIPS mode

---

diff --git a/doc/rpmsign.8 b/doc/rpmsign.8
index 80ffb6a..d895a3b 100644
--- a/doc/rpmsign.8
+++ b/doc/rpmsign.8
@@ -21,6 +21,9 @@ options generate and insert new signatures for each package
 existing signatures. There are two options for historical reasons,
 there is no difference in behavior currently.
 
+To create a signature rpm needs to verify the package's checksum. As a result
+packages with a MD5/SHA1 checksums cannot be signed in FIPS mode.
+
 \fBrpm\fR \fB--delsign\fR \fB\fIPACKAGE_FILE\fB\fR\fI ...\fR
 
 .PP