[Rpm-maint] [rpm-software-management/rpm] Make rpmkeys --list show Key fingerprint and sub key IDs (Issue #3332)

[Neal H. Walfield]

>  this talks about subkey keyids, but shouldn't it be subkey fingerprint instead

I agree that we should prefer fingerprints to key IDs whenever possible.  Unfortunately, we may not know the fingerprint if (1) the certificate is not available, and (2) the signature only references the signing key by key ID.  Modern signatures include the fingerprint, but older signatures don't (and v3 signatures can't).

```
$ sq --cert-store ...
```

Consider using `SEQUOIA_HOME` (or `--home`), like this:

```
$ export SEQUOIA_HOME=$(mktemp -d)
$ sq key import repos/rpm/tests/data/keys/alice.secret 
...
```

`--cert-store` only overrides the location of the certificate store, not the key store, not the configuration files, etc.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/3332#issuecomment-2387815899
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/3332/2387815899 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20241002/99ddf477/attachment-0001.html>