[Yum-devel] [PATCH] gpgkey improvements

Menno Smits menno-yum at freshfoo.com
Sun Jan 16 02:49:53 UTC 2005


Hi all,

The attached patch improves and simplifies the behaviour of the new 
gpgkey option (GPG key importing).

It contains:
- updates to pgpmsg.py to make it go further and actually calculate the
   key ID and fingerprints of GPG public key packets properly. It turns
   out I was really not doing this 100% correctly in the initial gpgkey
   patch. With these changes the keyids gvien by pgpmsg always match
   the output from the gpg command. I have tested this against many keys.

- Changes to yum to take advantage of the above. The key ID is now
   displayed to the user before installation and the check for whether a
   key has already been installed in the rpmdb is now simpler.

Still to come:
- Updates to the yum.conf man page (will do later today)

- Extraction of key packets from GPG key blocks to work around RPM
   issues with some key blocks. I'm feeling a lot more confident with
   rfc2440 now and have some ideas on how to do this by extending
   pgpmsg.py a little more. It should be noted that the public keys of
   all well known Fedora related repositories I've checked don't trigger
   this problem with RPM so this is not a critical thing.

Enjoy!
Menno


Scanned by the NetBox from NetBox Blue
(http://netboxblue.com/)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: yum-gpgkey-updates.patch
Type: text/x-patch
Size: 9353 bytes
Desc: not available
Url : http://lists.baseurl.org/pipermail/yum-devel/attachments/20050116/4ddca358/attachment.bin 


More information about the Yum-devel mailing list