Force RPM to check GPG key

Jeffrey Johnson n3npq at me.com
Tue Apr 17 15:30:18 UTC 2012


On Apr 17, 2012, at 10:41 AM, George Machitidze wrote:

> [root at proxy SPECS]# rpm -qip /root/automake-1.11.1-0.test.noarch.rpm |grep Sign
> Signature   : (none)

There's no signature to verify in that package. Q.E.D.

If you have a gpg private key configured and named in ~/.rpmmacros
(see "make 8 rpm"), then you need to do
	rpm --addsign *.rpm

You also need to export an armored pubkey and import to RPM
	rpm --import armored-pubkey-file-here
or you will see a RPMRC_NOKEY return (i.e. the pubkey fingerprint
in the digital signature isn't known to RPM).

hth

73 de Jeff

	



More information about the Rpm-list mailing list