[Yum-devel] gpg importing script

[seth vidal]

On Sat, 2005-01-15 at 10:28 +1000, Menno Smits wrote:
> seth vidal wrote:
> > One other, minor, thing - is it possible to print the key fingerprint/id
> > from pgpmsg.py? And If so should we output that as well before the user
> > confirmation?
> 
> I intentionally didn't do this due to the case of multiple keys in the 
> one public key block. During my testing I found that you can't reliably 
> predict which key ID RPM is going to use from the block when there's 
> multiple keys present. Usually there's only one key ID so in that case 
> it's easy. However, there was one block I tested with that contained 8 
> keys and RPM used something like the 5th one.
> 
> I figured that if I just display the first key ID every time it could be 
> confusing to users if they see a different key ID in the rpmdb to what 
> yum showed them.
> 
> Perhaps yum could just display all the key IDs? Usually there's just one 
> or two but like I said there can be more.
> 
> I might experiment some more to see if I predict the key that will get 
> imported a little better. If this can be done it'll simplify some of the 
> other gpgkey code as well.

can we write each key out separately from the keyblock? Then import just
the one the user wants:
do you want this one ID: foofo (y/n)?
do you want this one ID: barbo (y/n)?
do you want this one ID: quuxquo (y/n)?

what do you think?

-sv