Signed vs unsigned?

[leam hall]

Humor for the day. If I enable gpgcheck on the epel-scap-security-guide
repo it fails to install:

Package scap-security-guide-0.1-12.el6.noarch.rpm is not signed

If I don't, then the box gets dinged by the tool.  :)

Leam

[Shawn Wells]

On 9/30/13 10:09 AM, leam hall wrote:
> Humor for the day. If I enable gpgcheck on the 
> epel-scap-security-guide repo it fails to install:
>
> Package scap-security-guide-0.1-12.el6.noarch.rpm is not signed
>
> If I don't, then the box gets dinged by the tool.  :)

In the short term, Mick Wahren was playing with/documenting/patching how 
to add GPG keys into the build. Any update Mick?

In the long term, pending legit EPEL approval, we'll be signed by the 
formal Red Hat EPEL keys.