RE: Automatic signing

["Aaron Hanson" <a hanson f5 com>]

> -----Original Message-----
> From: rpm-list-bounces redhat com 
> [mailto:rpm-list-bounces redhat com] On Behalf Of Sean Atkinson
> Sent: Monday, June 27, 2005 3:20 AM
> To: rpm-list redhat com
> Subject: Automatic signing
> 
> Hi,
> 
> I'm writing a CGI script in Perl to authorise RPM packages 
> for installation by adding new signatures.  Since I didn't 
> find any suitable native Perl module available for this, I'm 
> calling the rpm binary instead.
> 
> However I'm having some trouble passing the "--addsign" 
> option since it prompts the user for the key's pass phrase, 
> even when I've set it to be empty.  RPM's source code reveals 
> that the getpass system call is being used and then this 
> phrase passed to gpg on a file descriptor, so I think my 
> problem's more with rpm than gpg.
> 
> Does anybody have any advice on how I might work around this 
> or if there's some better way to be doing it instead?
> 
Hi Sean -

	I posed the same question last year and got some pretty detailed
suggestions from jbj:

https://www.redhat.com/archives/rpm-list/2004-March/msg00120.html

-Aaron