9002-pacman-key-updatedb.patch 660 B

123456789101112131415161718
  1. this helps to ensure that an expired key will be trusted again,
  2. immediately after the updated keyring package is installed
  3. diff --git a/scripts/pacman-key.sh.in b/scripts/pacman-key.sh.in
  4. index f7f1dd6..c5fb73f 100644
  5. --- a/scripts/pacman-key.sh.in
  6. +++ b/scripts/pacman-key.sh.in
  7. @@ -599,7 +599,8 @@ verify_sig() {
  8. updatedb() {
  9. msg "$(gettext "Updating trust database...")"
  10. - if ! "${GPG_PACMAN[@]}" --batch --check-trustdb ; then
  11. + # --yes forces regeneration of trustdb, allowing expired keys to be trusted again
  12. + if ! "${GPG_PACMAN[@]}" --batch --check-trustdb --yes ; then
  13. error "$(gettext "Trust database could not be updated.")"
  14. exit 1
  15. fi