Issue
How can I verify the signature of the rpm package(which is signed using GPG) inside my C code ? Want to read the header of the rpm for the signature so that I can verify using openssl calls.
Am i even thinking in the right direction ?
Solution
"Programming RPM with C" from Fedora might help, specifically the section "Reading the RPM lead and signature". That's only the overview of some of the C calls; it then says "You can do more with the signature than merely reading past it, of course. Look in the online RPM documentation for more on verifying signatures."
Answered By - Aaron D. Marasco Answer Checked By - Marie Seifert (WPSolving Admin)
