RE: RPM --resign | option to mention the passphrase

["Bob Huisman" <Bob Huisman filterworks com>]

Hi,

 

You could also edit signature.c in the sources of the package rpm, and hard-code the passphrase. (not the best/safest option, but it works)

This can only be used if you use one key to sign packages, or if the passphrase is the same for all keys.

 

Bob Huisman

---

From: rpm-list-bounces redhat com [mailto:rpm-list-bounces redhat com] On Behalf Of Lis Maria
Sent: woensdag 23 mei 2007 13:53
To: RPM Package Manager
Subject: RPM --resign | option to mention the passphrase

Hi,

 

I need a little help on the RPM signing strategy. I was trying to automate the entire rpm signing process and i would like to know whether it is possible to sign without giving the passphrase (This is ok,since these rpms are used for some internal purpose only). Or is it possible to give the passphrase together with the signing command ( e.g rpm --resign <give passphrase here>) rather than getting it as a user input.

 

Thanks in Advance

 

Lis Thomas