Fingerprint gpg rpm packages

1

Didn't find the fingerprint for installing RPM packages on the page Linux | OpenZiti

Can someone please confirm that the following fingerprint is correct?

Importing GPG key 0x08C996E5:
 Userid     : "OpenZiti Developers <developers@openziti.org>"
 Fingerprint: 34CB CF18 427D 8814 B5BD BB0D DE36 23EF 08C9 96E5
 From       : https://packages.openziti.org/zitipax-openziti-rpm-stable/redhat8/x86_64/repodata/repomd.xml.key
2

@Metz That matches the signing key's fingerprint from GitHub.

$ curl -sSLf https://get.openziti.io/tun/package-repos.gpg \
  | gpg --with-fingerprint
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa3072/0xDE3623EF08C996E5 2022-07-11 [SC] [expires: 2024-07-10]
      Key fingerprint = 34CB CF18 427D 8814 B5BD  BB0D DE36 23EF 08C9 96E5
uid                             OpenZiti Developers <developers@openziti.org>
sub   rsa3072/0x5F4C996B0DAC0B5F 2022-07-11 [E] [expires: 2024-07-10]
      Key fingerprint = FDD3 F4FB 9983 7B78 83A0  0B59 5F4C 996B 0DAC 0B5F

I see now that the expected fingerprint isn't highlighted in the RPM installation instructions.

1 Like