diff options
| author | Julian Andres Klode <jak@debian.org> | 2022-03-07 11:53:27 +0100 |
|---|---|---|
| committer | Julian Andres Klode <jak@debian.org> | 2022-03-07 11:53:27 +0100 |
| commit | ee427f308600a4a3a6f67a4a7835e1172605ba06 (patch) | |
| tree | 71cae1f5614ac91b8309b3f8ea88ad1fff1e226f /doc | |
| parent | 409ee5821500f140896715a516ec8ffa008de789 (diff) | |
gpgv: Fix legacy fallback on unavailable keys
If a repository is signed with multiple keys, apt 2.4.0 would
ignore the fallback result if some keys were still missing,
causing signature verification to fail.
Rework the logic such that when checking if fallback was "succesful",
missing keys are ignored - it only matters if we managed to verify
one key now, whether good or bad.
Likewise, simplify the logic when to do the fallback:
If there was a bad signature in trusted.gpg.d, do NOT fallback at all
- this is a minor security issue, as a key in trusted.gpg.d could
fail silently with a bad signature, and then a key in trusted.gpg
might allow the signature to succeed (as trusted.gpg.d key is then
missing).
Only fallback if we are missing a good signature, and there are
keys we have not yet checked.
Diffstat (limited to 'doc')
0 files changed, 0 insertions, 0 deletions