Signed vs unsigned?

Shawn Wells shawn at redhat.com
Mon Sep 30 15:10:27 UTC 2013


On 9/30/13 10:09 AM, leam hall wrote:
> Humor for the day. If I enable gpgcheck on the 
> epel-scap-security-guide repo it fails to install:
>
> Package scap-security-guide-0.1-12.el6.noarch.rpm is not signed
>
> If I don't, then the box gets dinged by the tool.  :)

In the short term, Mick Wahren was playing with/documenting/patching how 
to add GPG keys into the build. Any update Mick?

In the long term, pending legit EPEL approval, we'll be signed by the 
formal Red Hat EPEL keys.



More information about the scap-security-guide mailing list