[Rpm-maint] next question: can rpm fail (instead of warn) on a bad signature?

[Shandy Brown]

> NOT OK will only occur if the file is corrupted - if it is an intact rpm
> but unsigned it still has a header digest and a header+payload digest to
> verify it's untampered with.  Thus rpm -K tells you this is the rpm
> built and intact and the payload and headers are consistent with the
> digests.

Is there some other method to detect that an rpm file is not signed?

Other than installing it and checking with rpm -qi.

sjbrown