NAME

       rpmkeys - RPM Keyring

SYNOPSIS

       rpmkeys {--import|--checksig}

DESCRIPTION

       The general forms of rpm digital signature commands are

       rpmkeys --import PUBKEY ...

       rpmkeys {-K|--checksig} PACKAGE_FILE ...

       The  --checksig  option  checks  all  the  digests and signatures contained in PACKAGE_FILE to ensure the
       integrity and origin of the package.  Note that signatures are now verified whenever a package  is  read,
       and --checksig is useful to verify all of the digests and signatures associated with a package.

       Digital  signatures cannot be verified without a public key.  An ASCII armored public key can be added to
       the rpm database using --import.  An imported public key is carried in a header, and key ring  management
       is  performed  exactly  like  package management.  For example, all currently imported public keys can be
       displayed by:

       rpm -qa gpg-pubkey*

       Details about a specific public key, when imported, can be displayed  by  querying.   Here's  information
       about the Red Hat GPG/DSA key:

       rpm -qi gpg-pubkey-db42a60e

       Finally,  public keys can be erased after importing just like packages.  Here's how to remove the Red Hat
       GPG/DSA key

       rpm -e gpg-pubkey-db42a60e

SEE ALSO

              popt(3),
              rpm(8),
              rpmdb(8),
              rpmsign(8),
              rpm2cpio(8),
              rpmbuild(8),
              rpmspec(8),

       rpmkeys --help - as rpm supports customizing the options via popt aliases it's  impossible  to  guarantee
       that what's described in the manual matches what's available.

       http://www.rpm.org/ <URL:http://www.rpm.org/>

AUTHORS

              Marc Ewing <marc@redhat.com>
              Jeff Johnson <jbj@redhat.com>
              Erik Troan <ewt@redhat.com>
              Panu Matilainen <pmatilai@redhat.com>

                                                 29 October 2010                                      RPMKEYS(8)