Where does zypper install the repository or package signing keys?

On 2014-05-31 12:36, jpluimers wrote:
> - Where does zypper install these keys?
> - How can I list the installed keys?
> - How can I verify these keys are indeed valid?

Good question.

The only zypper commands available related to keys are these two:


--no-gpg-checks         Ignore GPG check failures and continue.
--gpg-auto-import-keys  Automatically trust and import new repository
signing keys.

And there is nothing in the configuration directory “/etc/zypp/” related
to “key”, “pgp” or “gpg”.

But I found something. Under “/var/cache/zypp/raw/REPO_ALIAS/repodata”
there are some files related to the keys: repomd.xml.asc, repomd.xml.key
(and they are not xml at all).

So I guess that removing those two would force for the question to be
asked again.


Cheers / Saludos,

Carlos E. R.
(from 13.1 x86_64 “Bottle” at Telcontar)