Skip to content

repo-add: implicitly sign when verifying

Christian Hesse requested to merge eworm/pacman:verify-sign into master

Currently it is possible to verify a database signature, without signing the database. This causes the database to be altered, but the (then invalid) signature to be preserved.

Fix this by implicitly signing when verifying.

Signed-off-by: Christian Hesse mail@eworm.de

Merge request reports