FS#33091 - Add option to download signature file with package

Attached to Project: Pacman
Opened by Allan McRae (Allan) - Friday, 14 December 2012, 04:00 GMT
Last edited by Allan McRae (Allan) - Sunday, 04 December 2022, 07:50 GMT
Task Type Bug Report
Category Backend/Core
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version 4.0.3
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

The downloaded packages in the cache can not be verified unless they are still in the repos. Add an option to download the signature file with the package so this can be used at a later date.
This task depends upon

Closed by  Allan McRae (Allan)
Sunday, 04 December 2022, 07:50 GMT
Reason for closing:  Implemented
Additional comments about closing:  signatures always are downloaded now
Comment by Robotic-Brain (Robotic-Brain) - Saturday, 02 November 2019, 10:55 GMT
I can confirm this bug and regularly run into it.
In effect this renders any cached packages useless if you have strict signature checking enabled.

Related to: #33992

Loading...