Send patches - preferably formatted by git format-patch - to patches at archlinux32 dot org.
summaryrefslogtreecommitdiff
path: root/scripts/libmakepkg/integrity.sh.in
diff options
context:
space:
mode:
authorMorten Linderud <morten@linderud.pw>2021-02-22 00:09:07 +0100
committerAllan McRae <allan@archlinux.org>2021-02-24 23:05:48 +1000
commit0f75ab3224141a5e8a4fe72b48b4639c83c6316b (patch)
treee2357a0c892571dd81fb03e8804b5f8db0cdafe7 /scripts/libmakepkg/integrity.sh.in
parent7587153a447bd537c8f138be9ca0a3886a5f1e57 (diff)
pacman-key: --refresh-keys queries WKD before keyserver
With the recent outages of the keyservers there is a possibility of `--refresh-keys` failing to fetch new keys. A lot of current key distribution is done over WKD these days, and `pacman-key` has the ability to use it for `--recv-key`. There was a hope `gpg` would end up supporting WKD for the refresh functionality, but this seems to be limited to expired keys fetched through WKD. Since this functionality isn't yet available it makes sense to stuff it into `pacman-key`. The current implementation looks over all available keyids in the keyring, attempts to fetch over WKD and then fall backs to keyservers if no email has a valid WKD available. The downside of this approach is that it takes a bit longer to refresh the keys, but it should be more robust as the distribution should be providing their own WKDs. Co-authored-by: Jonas Witschel <diabonas@archlinux.org> Signed-off-by: Morten Linderud <morten@linderud.pw> Signed-off-by: Allan McRae <allan@archlinux.org>
Diffstat (limited to 'scripts/libmakepkg/integrity.sh.in')
0 files changed, 0 insertions, 0 deletions