Hi, I'm trying to verify that all my pkgs have gpg signatures attached and that they are correct sigs. so I'm doing rpm -K [packages] but if the pkg is not signed at all rpm tells me exactly NOTHING so I thought, I'll try to see if I can force it to do something in python but apparently unsigned packages sail smoothly by rpm.checksig(package, gpg) is the only way the sig check fails is if the sig is bad, not if the sig is nonexistent? thanks -sv -- GPG Public Key: http://www.phy.duke.edu/~skvidal/skvidal.gpg
Attachment:
signature.asc
Description: This is a digitally signed message part