[Yum-devel] gpg importing script

[Menno Smits]

seth vidal wrote:
> can we write each key out separately from the keyblock? Then import just
> the one the user wants:
> do you want this one ID: foofo (y/n)?
> do you want this one ID: barbo (y/n)?
> do you want this one ID: quuxquo (y/n)?
> 
> what do you think?

This is a lot harder than it sounds. RPM's key importing interface needs 
the key block as a byte stream so we'd need to pull the parts of the key 
out we want and convert this back to coherent standalone binary key 
block (pgpmsg.py is read-only).

Frankly, I think it's easier to figure out how to predict which key ID 
RPM is going to use over implementing a GPG key extractor and 
regenerator but I'm open to suggestions on how to approach this. Maybe 
it's easier than I think it is but I suspect not.

The gpgkey code works around all this by checking if _any_ of the key 
IDs in the key block are in the rpmdb. If one is then it assumes the key 
block has already been imported.

I will look at this some more later on today.

Menno

Scanned by the NetBox from NetBox Blue
(http://netboxblue.com/)