comment 1

Kelly
Tue, 14 Oct 2025 00:34:57 +0200

Following up on earlier comment, can confirm on Fedora 42 with RPM 4.20.1, I can create an ECC PGP key with NIST P-384, and successfully import it with rpmkey --import.

It is then visible with rpmkeys --list and in the old pseudo-packages interface with rpm -qa gpg-pubkey.

Also tested now with Alma 10 with RPM 4.19.1.1, import is also successful, shows up with rpm -qa gpg-pubkey (rpm 4.19 doesn't have rpmkeys --list yet)

Again, I did not test actually signing and verifying a package with it, but I take the fact that it imported as a good sign at least.

Nonetheless, their are probably still a lot of EL9 and older systems out there, and maybe Fedora systems older than 38? Also OpenSuSE was going to continue with the internal implementation for a while longer than Fedora, not sure what their status is. So may not be feasible to distribute rpm packages signed with ECC PGP keys for a while yet.