[Rpm-maint] [rpm-software-management/rpm] RPM signature verification for files from installed packages (Issue #2671)

[Artem S. Tashkinov]

Wow, there's a ton of things I've never known about even though I've been an avid user of `rpm -V`. Thank you very much for the information!

I've just double checked `man rpm` and nothing that you've written is there, so please forgive me for this intrusion.

@pmatilai 

My final question is what's the command to see the following information for all the installed RPMs:

1) Whether the package is signed or not
2) The key which is used to sign it
3) Whether the signature verification passes.

You've mentioned `rpm -qavv` but it's impossible to parse as a human being. I'd like to see something like,
```
acl-2.3.1-6.fc38.x86_64: Signed. Signature: OK. Key ID eb10b464.
acpid-2.0.34-2.fc38.x86_64: Signed. Signature: OK. Key ID eb10b464.
```

Or something similar.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/2671#issuecomment-1733255873
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/2671/1733255873 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20230925/39a160e2/attachment.html>