Red Hat Enterprise Linux 5 Administration Unleashed

Building RPM Packages 147You are prompted for each of these three items individually. After entering all three, youcan change any of them, confirm them by typing O for OK, or quit.If you type O, next enter a passphrase. Just like a password, a passphrase should contain acombination of upper- and lowercase letters, numbers, and special characters. Apassphrase is used instead of a password because a passphrase can be and should belonger than a user password. Instead of just using one word, try to use a passphrase basedon a long phrase. Just be sure it is one you can remember because it must be typed eachtime you sign an RPM package. After entering the passphrase and entering it again toconfirm it, the following message is displayed:We need to generate a lot of random bytes. It is a good idea to performsome other action (type on the keyboard, move the mouse, utilize thedisks) during the prime generation; this gives the random numbergenerator a better chance to gain enough entropy.+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++.+++++..++++++++++++++++++++++++++++++++++++++++.+++++++++++++++++++++++++>+++++.+++++As the message says, try to perform disk and I/O operations while the key is being generated.After the key is generate, a message similar to the following is displayed:5gpg: /root/.gnupg/trustdb.gpg: trustdb createdgpg: key AADA3407 marked as ultimately trustedpublic and secret key created and signed.gpg: checking the trustdbgpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust modelgpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1upub 1024D/AADA3407 2007-02-28Key fingerprint = AA96 00FF 5934 440D DE40 C4EA 13FB 19C1 AADA 3407uidTCBF Computers (TCBF) sub 2048g/1A85EDF8 2007-02-28The public and private keys are written to the /root/.gnupg/ directory. To write thepublic key to a file named public_key.txt, execute the following (replace Name with thereal name you used when generating the key):gpg --export -a ‘Name’ > public_key.txtCAUTIONBe sure to back up the private and public keys in a secure location. The private key isrequired when signing RPM packages.Anyone wanting to verify the signature of your RPM files, including yourself, must havethis key imported into the RPM keyring with the following command run as root:rpm --import public_key.txt