Re: rpm -K

[Vadim Nasardinov <vadimn redhat com>]

On Sunday 18 September 2005 21:52, Jason Pyeron wrote:
> how can I tell if a rpm has been signed or not?

You can try the same thing that Yum does, which is:

$ rpm -q --qf  \
  '%|DSAHEADER?{%{DSAHEADER:pgpsig}}:{%|RSAHEADER?{%{RSAHEADER:pgpsig}}:{%|SIGGPG?{%{SIGGPG:pgpsig}}:{%|SIGPGP?{%{SIGPGP:pgpsig}}:{(none)}|}|}|}|\n' firefox
DSA/SHA1, Fri 09 Sep 2005 11:52:17 PM EDT, Key ID b44269d04f2a6fd2


Substitute your package name for 'firefox' in the above example and
you should be good to go.

Kinda obvious in retrospect, isn't it?