Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#49229 - electrum pkgbuild installs without importing the required pgp key

Attached to Project: Community Packages
Opened by ikohvei (ikohvei) - Friday, 06 May 2016, 02:43 GMT
Last edited by Doug Newgard (Scimmia) - Friday, 06 May 2016, 02:54 GMT
Task Type Bug Report
Category Security
Status Closed
Assigned To No-one
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

When installing the electrum package, even though the pkgbuild appears to be using 'validpgpkeys=', I am able to install it without having imported the keys into gpg.

https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/electrum

I see these in the log
(35/35) checking keys in keyring
(35/35) checking package integrity

which look normal. I dont know why it isnt requiring me to import the authors pgp keys first.
This task depends upon

Closed by  Doug Newgard (Scimmia)
Friday, 06 May 2016, 02:54 GMT
Reason for closing:  Not a bug

Loading...