As of version 1.2, the rpm package of Threema for desktop is signed. In order to check the signature during the installation and update process, the public key used for the signature must be imported.
In the terminal, the key can be imported by running rpm --import rpm-signing-key.pub
. The signature can be verified by running rpm --checksig -v Threema-Latest.rpm
.
If the key has not yet been imported, the error message Header V4 RSA/SHA512 Signature, key ID c4e29d69: NOKEY
appears.