7d961c849b
Unlike our protégé apt-key, removing a key from our keyring is not sufficient to prevent it from being trusted or used for verification. We are better off flagging it as disabled and leaving it in the keyring so it cannot be reimported or fetched at a later date from a keyserver and continue to be used. Implement the logic to disable the key instead of delete it, figuring out --command-fd in the process. Note that the surefire way to disable a key involves including said key in the keyring package, such that it is both in foobar.gpg and foobar-revoked. Signed-off-by: Dan McGee <dan@archlinux.org> |
||
|---|---|---|
| .. | ||
| library | ||
| po | ||
| .gitignore | ||
| Makefile.am | ||
| makepkg.sh.in | ||
| pacman-db-upgrade.sh.in | ||
| pacman-key.sh.in | ||
| pacman-optimize.sh.in | ||
| pkgdelta.sh.in | ||
| rankmirrors.sh.in | ||
| repo-add.sh.in | ||