Breadcrumbs

Signed RPM Verification

  1. Export the public key to a file.

# gpg --export --armor test@utimaco.com > gpgpub.key
image-20260520-075124.png


Exporting the public key to a file

  1. Import the public key.

# rpm --import RPM-GPG-KEY-test
image-20260520-075200.png


Importing the public key to rpm db

  1. Verify the signature of the signed rpm.

# rpm --checksig <signed_rpm_file>
tmpadd763nj.jpg

Verifying the signed rpm file

  1. Verify the signing information.

# rpm -qpi ~/rpmbuild/RPMS/noarch/hello-1.0-1.noarch.rpm

The signature field contains the signing information.

image-20260520-075255.png


Verifying the signed rpm file signature information

This completes the Integration of GnuPG with u.trust GP HSM.