RPM Signing

1. Create file /root/.rpmmacros in user's home directory and add the following content in it

%_signature gpg 
%_gpg_path /root/.gnupg
%_gpg_name test@utimaco.com 
%_gpg /usr/local/bin/gpg 
%_gpg_sign_cmd %{_gpg} gpg --force-v3-sigs --batch --verbose --no-armor -no-secmem-warning -u "%{_gpg_name}" -sbo %{_signature_filename} --digestalgo filename} 

Content of rpmmacros file

Here:

• /root/.gnupg is the base directory for gnupg

• test@utimaco.com is the key name

• /usr/local/bin/gpg is the path for gpg

• %{_gpg} gpg --force-v3-sigs --batch --verbose --no-armor --no-secmem-warning -u "%{_gpg_name}" -sbo %{_signature_filename} --digest-algo filename} is the gpg command that will be used for signing rpm

2. Sign the file using below command

# rpm --addsign <rpm_file> 

Provide the slot PIN when prompted.

3. If you want to sign it again then run the below command. Provide the slot PIN when prompted.

# rpm --resign <rpm_file> 

Resigning the rpm file