diff options
| author | Dan McGee <dan@archlinux.org> | 2011-06-08 00:29:55 +0200 |
|---|---|---|
| committer | Dan McGee <dan@archlinux.org> | 2011-06-24 09:34:50 +0200 |
| commit | db3b86e7f34f4c3ccb42e98465f2069aa642a85f (patch) | |
| tree | 34ee212bbcc0385674908f0d427779732f9aadfb /test | |
| parent | 94d22f93096e210cd00d2e9c97c65f77d49ae387 (diff) | |
| download | pacman-db3b86e7f34f4c3ccb42e98465f2069aa642a85f.tar.gz pacman-db3b86e7f34f4c3ccb42e98465f2069aa642a85f.tar.xz | |
Do database signature checking at load time
This is the ideal place to do it as all clients should be checking the
return value and ensuring there are no errors. This is similar to
pkg_load().
We also add an additional step of validation after we download a new
database; a subsequent '-y' operation can potentially invalidate the
original check at registration time.
Note that this implementation is still a bit naive; if a signature is
invalid it is currently impossible to refresh and re-download the file
without manually deleting it first. Similarly, if one downloads a
database and the check fails, the database object is still there and can
be used. These shortcomings will be addressed in a future commit.
Signed-off-by: Dan McGee <dan@archlinux.org>
Diffstat (limited to 'test')
| -rw-r--r-- | test/pacman/tests/sign001.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/test/pacman/tests/sign001.py b/test/pacman/tests/sign001.py index 0ae417b7..14add09c 100644 --- a/test/pacman/tests/sign001.py +++ b/test/pacman/tests/sign001.py @@ -1,8 +1,8 @@ -self.description = "Add a signature to a package DB" +self.description = "Add a bogus signature to a package DB" sp = pmpkg("pkg1") sp.pgpsig = "asdfasdfsdfasdfsdafasdfsdfasd" -self.addpkg2db("sync+Always", sp) +self.addpkg2db("sync+Optional", sp) self.args = "-Ss" |