James Pifer wrote:
When you have your local mirror created how do you deal with gpg keys?
By signing those packages with your gpg key and importing the key into RPM or turning off the gpg key check if you are sure that you can trust those packages in avoiding middle men attacks.