Gullible jones wrote: > Thanks, but how do I prevent this from happening in the future without > disabling GPG checking entirely? Is there some package I have to install, as > with the Debian-Multimedia website? > Edit: Okay, it looks like the GPG signatures are missing... which package do > I install to get the GPG signatures? I should not have to turn GPG checking > off to have a functional system - it's a basic security measure.
GPG checksums are part of the rpm package metadata. If a BLAG rpm is built with a signature, "rpm --import PUBLICKEY" would import the public key so that you can "rpm -K foo.rpm" to verify the signature. With yum, this import is typically automatic. Public keys can be got from /etc/pki/rpm-gpg, which should include the Red Hat and Fedora public keys for any fc9 distributed package that is included. -------------------- m2f -------------------- Sent using Mail2Forum (http://www.mail2forum.com). Read this topic online here: http://forums.blagblagblag.org/viewtopic.php?p=26316#26316 -------------------- m2f --------------------
_______________________________________________ blag-users mailing list [email protected] https://www.autistici.org/mailman/listinfo/blag-users
