Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-47106

Use librpmio for handling PGP keys

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Normal Normal
    • rhel-10.0.beta
    • rhel-10.0.beta
    • librepo
    • librepo-1.18.0-2.el10
    • sst_cs_software_management
    • ssg_core_services
    • 22
    • 24
    • None
    • False
    • Hide

      None

      Show
      None
    • Yes
    • None
    • Enhancement
    • Hide
      .DNF now uses `librpmio` for processing PGP keys

      To verify RPM package signatures, RPM uses the `rpm-sequoia` library instead of the previously-used custom PGP parser. With this update, the `librepo` library, which can verify PGP signatures on DNF repositories, now also uses `rpm-sequoia` through the `librpmio` library. As a result, to provide consistent user experience, the `dnf`, `librpm`, and `rpm` components now use the same PGP implementation.
      Show
      .DNF now uses `librpmio` for processing PGP keys To verify RPM package signatures, RPM uses the `rpm-sequoia` library instead of the previously-used custom PGP parser. With this update, the `librepo` library, which can verify PGP signatures on DNF repositories, now also uses `rpm-sequoia` through the `librpmio` library. As a result, to provide consistent user experience, the `dnf`, `librpm`, and `rpm` components now use the same PGP implementation.
    • Done
    • None

      RPM in RHEL 10 uses rpm-sequoia since 2022-11-24 (002373bffdb75af81bf2bdef6c0b06b6d5616922 commit). To unify DNF's stack PGP handling with RPM, it's good idea to move DNF's stack from gpgme to librpmio.

      Upstream commit https://github.com/rpm-software-management/librepo/pull/318.

            rhn-support-ppisar Petr Pisar
            rhn-support-ppisar Petr Pisar
            Eva Mrakova Eva Mrakova
            Mariya Pershina Mariya Pershina
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: