> -----Original Message----- > From: rpm-list-bounces@xxxxxxxxxx > [mailto:rpm-list-bounces@xxxxxxxxxx] On Behalf Of Sean Atkinson > Sent: Monday, June 27, 2005 3:20 AM > To: rpm-list@xxxxxxxxxx > Subject: Automatic signing > > Hi, > > I'm writing a CGI script in Perl to authorise RPM packages > for installation by adding new signatures. Since I didn't > find any suitable native Perl module available for this, I'm > calling the rpm binary instead. > > However I'm having some trouble passing the "--addsign" > option since it prompts the user for the key's pass phrase, > even when I've set it to be empty. RPM's source code reveals > that the getpass system call is being used and then this > phrase passed to gpg on a file descriptor, so I think my > problem's more with rpm than gpg. > > Does anybody have any advice on how I might work around this > or if there's some better way to be doing it instead? > Hi Sean - I posed the same question last year and got some pretty detailed suggestions from jbj: https://www.redhat.com/archives/rpm-list/2004-March/msg00120.html -Aaron