+             self.check_rpm_sums()

+     def check_rpm_sums(self):

+         '''Validate signature data on disc'''

+         if self.options.no_sums:

+             return

+         build = self.build

+         sums = {}

+         with session.multicall(strict=False) as m:

+             for rpminfo in self.rpms:

+                 sums[rpminfo['id']] = m.getRPMChecksums(rpm_id=rpminfo['id'], cacheonly=True)

+                 # cacheonly: no point in checking if it isn't already in the db

+         try:

+             sums = {i: sums[i].result for i in sums}

+         except koji.GenericError as e:

+             if 'Invalid method:' in str(e):

+                 logger.warning('Server does not support rpm checksums')

+                 return

+             raise

+         sumtype_priority = ['sha256', 'sha1', 'md5']

+         for rpminfo in self.rpms:

+             for sigkey in sums[rpminfo['id']]:

+                 ksums = sums[rpminfo['id']][sigkey]

+                 signed = os.path.join(self.build_dir, koji.pathinfo.signed(rpminfo, sigkey))

+                 if not os.path.exists(signed):

+                     # this is ok

+                     continue

+                 for sumtype in sumtype_priority:

+                     if sumtype not in ksums:

+                         continue

+                     start = time.time()

+                     self.verify_checksum(signed, sumtype, ksums[sumtype])

+                     elapsed = time.time() - start

+                     stats.increment('rpmchecksum.checked')

+                     stats.increment('rpmchecksum.time', elapsed)

+                     # checking a single checksum is enough

+                     break

+ 

+             if isinstance(sumtype, int):

+                 sumtype = koji.CHECKSUM_TYPES[sumtype]