Where do you get the message that Digest::SHA1 is missing? When you try to install Spamassin through RPM or when you try to compile it?

What RPM (or any package manager) thinks is installed on the system and what actually is installed does not have to match. A package manager only knows its database.

I guess the easiest way to resolve this conflict (if RPM is missing this package) is to install Digest::SHA1 through the package manager. Another option is to just force the install.

florg