test local rpm file in place for consistency, size, etc.

[T.C. Hollingsworth]

On Tue, Nov 22, 2011 at 9:13 PM, Skunk Worx <skunkworx at verizon.net> wrote:
> ..
> foo.rpm : (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#6df2196f)
> ...
>
> They all say this -- which seems okay -- all things considered. They are
> Fedora 9 update rpms from a couple years ago.

That's just telling you RPM doesn't know about the GPG key those RPMs
were signed with.  Fedora uses a new key for every release, so there's
no way you have the Fedora 9 package signing key installed.  ;-)

-T.C.