Re: Signing RPMs

[John Aldrich <john chattanooga net>]

On Sunday 01 July 2001 09:49 pm, you wrote:
> John Aldrich wrote:
> > How does one "sign" an RPM using GPG or PGP? I can't seem to figure it
> > out. I'm the RPM builder for a couple small projects and I'm just
> > wondering how to "authenticate" these so that anyone who wants to do so
> > can verify them. John
>
> Hi John,
>
> I think you'll find the answer your looking for in the online copy of
> "Maximum RPM" at:
>
>     http://www.rpm.org/max-rpm/ch-rpm-pgp.html
>
Michael:
Thanks for pointing me in the right direction, however I must be a total 
idiot because I don't see ANYWHERE in there where it tells the CORRECT 
placement for the "signature" info in the /usr/lib/rpm/rpmrc file. Plus, if I 
put the commands in /root/.rpmrc I *still* get the following errors:
error: bad option 'signature' at /root/.rpmrc:1
error: bad option 'pgp_name' at /root/.rpmrc:2
error: bad option 'pgp_path' at /root/.rpmrc:3

Can you PLEASE tell me what I'm doing wrong? FWIW, I'm using GPG, but it 
shouldn't matter. Below is my /root/.rpmrc:

signature: pgp
pgp_name:john@chattanooga.net
pgp_path:/home/john/.pgp

Any suggestions?
	Thanks...
	John