]> git.saurik.com Git - apt.git/commit - methods/gpgv.cc
don't show NO_PUBKEY warning if repo is signed by another key
authorDavid Kalnischkies <david@kalnischkies.de>
Thu, 28 Apr 2016 22:31:49 +0000 (00:31 +0200)
committerDavid Kalnischkies <david@kalnischkies.de>
Sun, 1 May 2016 08:50:24 +0000 (10:50 +0200)
commitfb7b11ebb852fa255053ecab605bc9cfe9de0603
tree409a82bf36e0be9d79666872a2165feb9c22b932
parent1af227c2eaad386f0917fc4f36c84fd5999b884e
don't show NO_PUBKEY warning if repo is signed by another key

Daniel Kahn Gillmor highlights in the bugreport that security isn't
improving by having the user import additional keys – especially as
importing keys securely is hard.

The bugreport was initially about dropping the warning to a notice, but
in given the previously mentioned observation and the fact that we
weren't printing a warning (or a notice) for expired or revoked keys
providing a signature we drop it completely as the code to display a
message if this was the only key is in another path – and is considered
critical.

Closes: 618445
apt-pkg/acquire-item.cc
methods/gpgv.cc
test/integration/framework
test/integration/test-apt-key
test/integration/test-apt-update-ims
test/integration/test-releasefile-verification