pkg-repositories(8) currently does not report the value of the signature_type field of a repository configuration if its value is NONE.
Since the lack of signature has consequences on security I believe this setting should always be explicitly reported.
Offending line:
|
if (pkg_repo_signature_type(repo) != SIG_NONE) |
pkg-repositories(8)currently does not report the value of thesignature_typefield of a repository configuration if its value isNONE.Since the lack of signature has consequences on security I believe this setting should always be explicitly reported.
Offending line:
pkg/src/utils.c
Line 1342 in 31aa72e