From 50e3fee26ae843a812b1c9ec8531946931773fd3 Mon Sep 17 00:00:00 2001
From: Julian Andres Klode <julian.klode@canonical.com>
Date: Wed, 28 Feb 2024 15:14:43 +0100
Subject: Implement gpgv --assert-pubkey-algo=>=rsa2048,ed25519,ed448

The assertion can be overriden using apt::key::assert-pubkey-algo,
the default is the most opinionated one.

This will inform the user during apt-cdrom add as we do not
pass --quiet to user, so adjust test case.

Add a simple test case for it to test-method-gpgv.

LP: #2055193
---
 apt-pkg/init.cc | 1 +
 1 file changed, 1 insertion(+)

(limited to 'apt-pkg')

diff --git a/apt-pkg/init.cc b/apt-pkg/init.cc
index f1742c019..75935404f 100644
--- a/apt-pkg/init.cc
+++ b/apt-pkg/init.cc
@@ -131,6 +131,7 @@ bool pkgInitConfig(Configuration &Cnf)
       Cnf.Set("APT::Build-Essential::", "build-essential");
    Cnf.CndSet("APT::Install-Recommends", true);
    Cnf.CndSet("APT::Install-Suggests", false);
+   Cnf.CndSet("APT::Key::Assert-Pubkey-Algo", ">=rsa2048,ed25519,ed448");
    Cnf.CndSet("Dir","/");
    
    // State
-- 
cgit v1.2.3-70-g09d2