123456789101112131415161718 |
- this helps to ensure that an expired key will be trusted again,
- immediately after the updated keyring package is installed
- diff --git a/scripts/pacman-key.sh.in b/scripts/pacman-key.sh.in
- index f7f1dd6..c5fb73f 100644
- --- a/scripts/pacman-key.sh.in
- +++ b/scripts/pacman-key.sh.in
- @@ -599,7 +599,8 @@ verify_sig() {
-
- updatedb() {
- msg "$(gettext "Updating trust database...")"
- - if ! "${GPG_PACMAN[@]}" --batch --check-trustdb ; then
- + # --yes forces regeneration of trustdb, allowing expired keys to be trusted again
- + if ! "${GPG_PACMAN[@]}" --batch --check-trustdb --yes ; then
- error "$(gettext "Trust database could not be updated.")"
- exit 1
- fi
|