• Post Reply Bookmark Topic Watch Topic
  • New Topic

gpgcheck for the JDK rpm bundle  RSS feed

 
Vishwa Kumba
Ranch Hand
Posts: 1066
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I am writing a script to install Oracle JDK using rpm bundle in CentOS Linux using Yum, so that it can be used to install java/jdk on developers' VMs.
I would like gpgcheck to be enabled to verify the integrity/authenticity of the downloaded rpm bundle.

Any ideas, where I could find the gpgkey for the bundle jdk-7u25-linux-x64.rpm?
 
Ninad Kulkarni
Ranch Hand
Posts: 802
Java Linux
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I think this is related to installation
 
Campbell Ritchie
Marshal
Posts: 56578
172
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Don't know. This link suggests the 64‑bit versions don't work with a PGP key, however. Don't use JDK7u25. Use 8u25 or 7u71/72 instead.

And welcome to the Ranch
 
Vishwa Kumba
Ranch Hand
Posts: 1066
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
thanks, I had downloaded the rpm bundle for CentOS from here.. http://download.oracle.com/otn/java/jdk/7u25-b15/jdk-7u25-linux-x64.rpm

I found an answer from this link http://unix.stackexchange.com/questions/17368/how-do-i-tell-which-gpg-key-an-rpm-package-was-signed-with
We cannot verify the signature on the rpm bundle jdk-7u25-linux-x64.rpm as file is not signed with a gpg key.
(I can do the md5checksum though)

sudo rpm -qpi jdk-7u25-linux-x64.rpm


see the Signature Field below


 
Campbell Ritchie
Marshal
Posts: 56578
172
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Well done finding that. It seems rather similar to what I found earlier. I usually get my downloads here; there is an RPM but I usually find the .tar.gz easier to use. You simply unzip it and alter your PATH to point to the new /bin directory. That works for all flavours of Linux I have tried, including CentOS.
I could find nothing about keys in the release notes nor in the README link on the downloads website.
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!