What is the meaning of the gpgcheck in repo file?

Question

In the .repo file:

[centos]    
name=centos7.2   
baseurl=http://10.0.0.1/centos7.2/7.2/xxx/x86_64/   
enabled=1   
gpgcheck=0

You can see there is some key-value analogy things, I know the name, baseurl and enable representative for what, but I don't know what is the use of gpgcheck, someone can help with that?

Answer 1

gpgcheck
If set to 1, verify the authenticity of the packages by checking the GPG signatures. You might need to set gpgcheck to 0 if a package is unsigned, but you should be wary that the package could have been maliciously altered.