[WBEL-users] Getting up2date to install locally signed RPMs

[Jesse]

On Fri, 14 May 2004, William Hooper wrote:

> > What do I need to do to get up2date to install and update RPMs that we've
> > signed with our in-house RPM GPG key?

> What does:
> rpm -K package_file_name.rpm
> give you?

rpm -K gives:
boa-0.94.14-0.rc17.1.fr.i386.rpm: (sha1) dsa sha1 md5 gpg OK
rpm -vK gives:
    Header V3 DSA signature: OK, key ID 75dcef79
    Header SHA1 digest: OK (9e6999295f0b727b7c20054548a3b02292f4f2a3)
    MD5 digest: OK (a057d514b0bb90179baffbe146a6b396)
    V3 DSA signature: OK, key ID 75dcef79

rpm -qi gpg-pubkey-75dcef79 returns information on my installed GPG key.

I resigned the package with the command:
  rpm --resign boa-0.94.14-0.rc17.1.fr.i386.rpm

up2date --gpg-flags returns:
--homedir /root/.gnupg --no-default-keyring --keyring
/etc/sysconfig/rhn/up2date-keyring.gpg

---
Jesse <j@lumiere.net>