rpm --nosignature reversed meaning

Tomasz Pala gotar at polanet.pl
Tue Aug 30 12:49:37 CEST 2016


On Tue, Aug 30, 2016 at 06:41:39 -0400, Jeffrey Johnson wrote:

>> Let me guess for the last time: if handled properly,
>> 	rpm --import PLD-3.0-Th-GPG-key.asc
>> should result in 2 gpg-pubkeys in rpm database. There is one, not working.
> 
> There are no circumstances that a single
> 	rpm ???import
> will result in multiple pubkeys being imported into an rpmdb.
> 
> There is no support for subkeys in rpm, nor is there any
> support for concatenated armored pub keys.

If so, rpm should either ignore secondary key or refuse to install such
joint at all.

On the PLD side - someone has to split the key on FTP (and then in
rpm.git). Or remove it completely, as apparently noone uses sigs anyway...

-- 
Tomasz Pala <gotar at pld-linux.org>


More information about the pld-devel-en mailing list