SCIENTIFIC-LINUX-USERS Archives

September 2012

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: How can I check authenticity of source rpms?
From:
Müller-Reineke, Matthias <[log in to unmask]>
Reply To:
Müller-Reineke, Matthias <[log in to unmask]>
Date:
Wed, 26 Sep 2012 11:43:11 +0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (1 lines) 
Pat Riehecky wrote:

> Isn't /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release the correct key on 

> SL6?  This file is packaged with sl-release and should be present on all 



So the solution to my problem is (on a SL system):



As root:

rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release



As ordinary user:



~/> rpm --checksig -v tomcat6-6.0.24-45.el6.src.rpm

tomcat6-6.0.24-45.el6.src.rpm:

    Header V3 RSA/SHA256 Signature, key ID fd431d51: OK

    Header SHA1 digest: OK (906acdd5cf193699ef3028d438b12edf7c934d47)

    V3 RSA/SHA256 Signature, key ID fd431d51: OK

    MD5 digest: OK (7ec8af89e12e5ba43ee1a97e848e75a4)





Many thanks for the helpful tips.





Matthias

ATOM RSS1 RSS2