Verify Linux (Debian/RPM) agent software with public key

You can download and verify agent software public key for RPM and Debian based distributions.

Downloading public key (gpg) on the end point

  1. Navigate to Dashboard Agents to access the public key for the Linux agent. 
  2. Download and copy the public key to the end point machine.

Importing public key 

You can install or upgrade . rpm and .deb package from the Dashboard using CLI commands. 

RPM based distributions
[ctuser@centos77 ~]$ rpm --import public_key_rpm_8.22.0.475.pub
[ctuser@centos77 ~]$ rpm -qa gpg*
gpg-pubkey-f4a80eb5-53a7ff4b
gpg-pubkey-42f84c04-61545745
gpgme-1.3.2-5.el7.x86_64
[ctuser@centos77 ~]$ rpm -qi gpg-pubkey-42f84c04-61545745
Name        : gpg-pubkey
Version     : 42f84c04
[ctuser@centos77 ~]$ rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'
gpg-pubkey-f4a80eb5-53a7ff4b    gpg(CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>)
gpg-pubkey-42f84c04-61545745    gpg(ColorTokens, Inc. (Package Signing Key) <security@colortokens.com>)
[ctuser@centos77 ~]buffer_1lt;
Debian based distribution
gpg --import public_key_debian_8.22.0.475.pub
ctuser@ctuser-VirtualBox:~$ gpg --list-keys
/home/ctuser/.gnupg/pubring.gpg
-----------------------------
pub   2048R/42F84C04 2021-09-29
uid   ColorTokens, Inc. (Package Signing Key) <security@colortokens.com>
sub   2048R/F88DED59 2021-09-29

Verifying package signature

You can verify . rpm and .deb package using CLI commands.

RPM based distribution
[ctuser@centos77 ~]$ rpm --checksig colortokens_radar_8.22.0-475_linux.rpm
colortokens_radar_8.22.0-475_linux.rpm: rsa sha1 (md5) pgp md5 OK
[ctuser@centos77 ~]$ rpm -q --qf '%{SIGPGP:pgpsig} %{SIGGPG:pgpsig}\n' -p colortokens_radar_8.22.0-475_linux.rpm
RSA/SHA256, Mon 01 Nov 2021 06:30:11 AM EDT, Key ID 47cbc77a42f84c04 (none)
[ctuser@centos77 ~]$
Debian based distribution
ctuser@ctuser-VirtualBox:~$ dpkg-sig --verify colortokens_radar_8.22.0-475_linux.deb
Processing colortokens_radar_8.22.0-475_linux.deb...
GOODSIG _gpgbuilder D24AC2E51F40D90162A19CCBD1A84BC7C35967BB 1635762611
ctuser@ctuser-VirtualBox:~buffer_4lt;
Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.