[SOLVED] How to sign a package when installing with yum

[blnlx]

When I use YUM to install ICAClient it ends with the following message "Package ICAClient-11.100-1.i386.rpm is not signed" (see the code below). However, when using browser (Nautilus) to start installation of the same ICAClient-11.100-1.i386.rpm it completes with success (see the image below).

This happens when installing with YUM from the CLI:

[root@nc6000 boris]# yum install /mnt/temp/DAT/software/linux/INSTALL/ICA/ICAClient-11.100-1.i386.rpm 
Loaded plugins: downloadonly, fastestmirror, presto, refresh-packagekit, remove-with-leaves, security, show-leaves, verify
Loading mirror speeds from cached hostfile
 * fedora: mirror.leaseweb.com
 * rpmfusion-free: mirror01.th.ifl.net
 * rpmfusion-free-updates: mirror01.th.ifl.net
 * rpmfusion-nonfree: mirror01.th.ifl.net
 * rpmfusion-nonfree-updates: mirror01.th.ifl.net
 * updates: mirror.leaseweb.com
Setting up Install Process
Examining /mnt/temp/DAT/software/linux/INSTALL/ICA/ICAClient-11.100-1.i386.rpm: ICAClient-11.100-1.i386
Marking /mnt/temp/DAT/software/linux/INSTALL/ICA/ICAClient-11.100-1.i386.rpm to be installed
Resolving Dependencies
--> Running transaction check
---> Package ICAClient.i386 0:11.100-1 set to be installed
--> Processing Dependency: libXaw.so.7 for package: ICAClient-11.100-1.i386
--> Processing Dependency: libXm.so.4 for package: ICAClient-11.100-1.i386
--> Running transaction check
---> Package libXaw.i686 0:1.0.6-4.fc12 set to be installed
---> Package openmotif.i686 0:2.3.3-1.fc13 set to be installed
--> Finished Dependency Resolution

Dependencies Resolved

==========================================================================================================================
 Package                  Arch                Version                       Repository                               Size
==========================================================================================================================
Installing:
 ICAClient                i386                11.100-1                      /ICAClient-11.100-1.i386                6.6 M
Installing for dependencies:
 libXaw                   i686                1.0.6-4.fc12                  fedora                                  169 k
 openmotif                i686                2.3.3-1.fc13                  rpmfusion-nonfree                       1.2 M

Transaction Summary
==========================================================================================================================
Install       3 Package(s)

Total size: 7.9 M
Total download size: 1.4 M
Installed size: 10 M
Is this ok [y/N]: y
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 1.4 M
(1/2): libXaw-1.0.6-4.fc12.i686.rpm                                                                | 169 kB     00:00     
(2/2): openmotif-2.3.3-1.fc13.i686.rpm                                                             | 1.2 MB     00:03     
--------------------------------------------------------------------------------------------------------------------------
Total                                                                                     365 kB/s | 1.4 MB     00:03     


Package ICAClient-11.100-1.i386.rpm is not signed
[root@nc6000 boris]#

This is the result when installing from the file browser:


Can someone explain to me what is happening here?
I prefer using CLI when installing packages. Which options can be use to sign a package during installation with YUM?

[leigh123linux]

Override it

yum install --nogpgcheck /mnt/temp/DAT/software/linux/INSTALL/ICA/ICAClient-11.100-1.i386.rpm

[blnlx]

It works. This is exactly what I was looking for.
Thanks a lot!

[assen]

Hi,

An RPM package can be signed (i.e. have the digital signature of its builder) or not signed. By default, on Fedora yum will refuse to install a package which is not signed - that's why you have to override it with "--nogpgcheck".

Some other applications can deal with RPM packages without calling yum, so they can install any package without complaining if it's not signed.

WWell,

[blnlx]

Thank you for the explanation.