CentOS - Apr 2015 - Signed repomd.xml.asc files for CentOS-6 and CentOS-7 (testing)

For those of you not currently on the centos-devel mailing list, we are
looking to test signed repomd.xml files (repomd.xml.asc) for CentOS-6
and CentOS-7.  If you are interested in signed metadata repos, please
look at this post:

http://lists.centos.org/pipermail/centos-devel/2015-April/013210.html

Also, if you are willing to test / help with the solution for signed
metadata, please join the centos-devel mailing list and correspond there:

http://lists.centos.org/mailman/listinfo/centos-devel

Thanks,
Johnny Hughes

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20150414/3024d0d4/attachment-0001.sig>

Morning, Johnny,

Johnny Hughes wrote:
> For those of you not currently on the centos-devel mailing list, we are
> looking to test signed repomd.xml files (repomd.xml.asc) for CentOS-6
> and CentOS-7.  If you are interested in signed metadata repos, please
> look at this post:
>
> http://lists.centos.org/pipermail/centos-devel/2015-April/013210.html
>
> Also, if you are willing to test / help with the solution for signed
> metadata, please join the centos-devel mailing list and correspond there:
>
> http://lists.centos.org/mailman/listinfo/centos-devel
>
Thank you *very* much for this post. It's much appreciated (and I
forwarded it to my manager, as we have a local mirror here).

       mark

On 04/14/2015 08:54 AM, m.roth at 5-cent.us wrote:
> Morning, Johnny,
> 
> Johnny Hughes wrote:
>> For those of you not currently on the centos-devel mailing list, we are
>> looking to test signed repomd.xml files (repomd.xml.asc) for CentOS-6
>> and CentOS-7.  If you are interested in signed metadata repos, please
>> look at this post:
>>
>> http://lists.centos.org/pipermail/centos-devel/2015-April/013210.html
>>
>> Also, if you are willing to test / help with the solution for signed
>> metadata, please join the centos-devel mailing list and correspond
there:
>>
>> http://lists.centos.org/mailman/listinfo/centos-devel
>>
> Thank you *very* much for this post. It's much appreciated (and I
> forwarded it to my manager, as we have a local mirror here).
I did not get any help in creating an auto-import feature for the key ..
but this is now implemented as is on CentOS-6 and CentOS-7 'updates'
repo.  Usage is completely optional and the default is not used.

You can now enable this option for the 'updates' repo in CentOS-6 and
CentOS-7:

repo_gpgckeck=1

See 'man yum.conf' for more on either CentOS-6 and CentOS-7 .. here is
the info from CentOS-5:

repo_gpgcheck: Either ?1? or ?0?. This tells yum whether or not it
should perform a GPG signature check on the repodata.  The default is ?0?.

Thanks,
Johnny Hughes


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20150506/8f9c3d34/attachment-0001.sig>