summaryrefslogtreecommitdiffstats
path: root/TODO.dan
diff options
context:
space:
mode:
authorDan McGee <dan@archlinux.org>2009-08-24 13:23:44 -0500
committerDan McGee <dan@archlinux.org>2011-03-23 00:26:54 -0500
commita4120f2015ae4d5880642e16c81acadbab77555d (patch)
tree0fd937049a90694f082738af3b1ef297c76bc742 /TODO.dan
parent8fde399fe62c3a08310e1830bb15b6e93ed360f9 (diff)
downloadpacman-a4120f2015ae4d5880642e16c81acadbab77555d.tar.xz
repo-add: allow signing of the package database
In order to be fully secure, we can't only sign packages. We also need to sign our repository metadata to prevent database falsification, dependency injection, etc. Add an '-s/--sign' option that allows this functionality, and will generate a .sig file side-by-side with the package database. While at it, fix the issue where a signature file would never be found because of 'cd' madness (this needs fixing in another commit). Signed-off-by: Dan McGee <dan@archlinux.org>
Diffstat (limited to 'TODO.dan')
0 files changed, 0 insertions, 0 deletions