Are RPM Packages Encrypted?
In a word, no. Rather than being encrypted, RPM package files possess a digital signature. This is a way of using encryption to attach a signature (again, basically a large number) to some information, such that: The signature cannot be separated from the information. Any attempt to verify the signature against any other information will fail. The signature can only be produced by one private key. In the case of RPM, the information being signed is the contents of the .rpm file itself. A digital signature is just like a regular signature. It doesn’t obscure the contents of the document being signed, it just provides a method of determining the authenticity of a document.
Related Questions
- How do I upgrade packages across different architectures by using an RPM bundle on a managed device that has ZENworks 7.3 Linux Management Hot Patch 1 or later installed?
- How can I automate deletion of the orphan RPM packages from the ZENworks Linux Management package repository?
- Why does the ZMD show fewer installed packages than are shown by the rpm -qa command?
