disable database and package signature verification

This is a job for pacman. No need to replicate it in expac. People
(rightfully) complain about gpgme sucking ass and hanging on
verification. I can't replicate this behavior, but it doesn't surprise
me, and I'm not wasting my time to figure out why.

For extra credit, maybe I can convince people to stop blindly signing
and trusting random 3rd party keys.

1 files changed, 2 insertions, 4 deletions

diff --git a/expac.c b/expac.c
index fcb0909..ae3ef6d 100644
--- a/expac.c
+++ b/expac.c
@@ -188,8 +188,7 @@ static alpm_handle_t *alpm_init(void) {
       section[strlen(section) - 1] = '\0';
 
       if (strcmp(section, "options") != 0) {
-        alpm_register_syncdb(handle, section,
-            ALPM_SIG_DATABASE | ALPM_SIG_DATABASE_OPTIONAL);
+        alpm_register_syncdb(handle, section, 0);
       }
     }
   }
@@ -746,8 +745,7 @@ int main(int argc, char *argv[]) {
       alpm_pkg_t *pkg;
       int err;
 
-      err = alpm_pkg_load(handle, i->data, 0,
-          ALPM_SIG_PACKAGE|ALPM_SIG_PACKAGE_OPTIONAL, &pkg);
+      err = alpm_pkg_load(handle, i->data, 0, 0, &pkg);
       if (err) {
         fprintf(stderr, "error: %s: %s\n", (const char*)i->data,
             alpm_strerror(alpm_errno(handle)));