Re: gpg sig checking in python or from the command line

[Jeff Johnson <jbj JBJ ORG>]

On Sun, Jan 27, 2002 at 11:42:27PM -0500, seth vidal wrote:
> Hi,
>  I'm trying to verify that all my pkgs have gpg signatures attached and
> that they are correct sigs.
> 
> so I'm doing rpm -K [packages]
> 

OK.

> but if the pkg is not signed at all rpm tells me exactly NOTHING

Well, if you add -v or -vv you do get more info.

> so I thought, I'll try to see if I can force it to do something in
> python but apparently unsigned packages sail smoothly by
> rpm.checksig(package, gpg)

Yup.

> 
> is the only way the sig check fails is if the sig is bad, not if the sig
> is nonexistent?

Currently.

73 de Jeff

-- 
Jeff Johnson	ARS N3NPQ
jbj@jbj.org	(jbj@redhat.com)
Chapel Hill, NC