aboutsummaryrefslogtreecommitdiffstatshomepage
diff options
context:
space:
mode:
Diffstat (limited to '')
-rwxr-xr-xapt-panopticon.lua5
1 files changed, 4 insertions, 1 deletions
diff --git a/apt-panopticon.lua b/apt-panopticon.lua
index 81ac7e0..2caad1c 100755
--- a/apt-panopticon.lua
+++ b/apt-panopticon.lua
@@ -46,6 +46,9 @@ local referenceDevs =
46 "merged/pool/DEVUAN/main/d/devuan-keyring/devuan-keyring_2022.09.04_all.deb", 46 "merged/pool/DEVUAN/main/d/devuan-keyring/devuan-keyring_2022.09.04_all.deb",
47} 47}
48 48
49local keyring = "/usr/share/keyrings/devuan-archive-keyring.gpg"
50--local keyring = "/etc/apt/trusted.gpg.d/devuan-keyring-2022-archive.gpg"
51
49local curlStatus = 52local curlStatus =
50{ 53{
51 [1 ] = "Unsupported protocol. This build of curl has no support for this protocol.", 54 [1 ] = "Unsupported protocol. This build of curl has no support for this protocol.",
@@ -863,7 +866,7 @@ local parseRelease = function(host)
863 postDownload(host, n, o) 866 postDownload(host, n, o)
864 if (".gpg" == o:sub(-4, -1)) and (APT.checkFile('results/' .. host .. '/merged/dists/' .. n .. '/' .. o)) then 867 if (".gpg" == o:sub(-4, -1)) and (APT.checkFile('results/' .. host .. '/merged/dists/' .. n .. '/' .. o)) then
865 if APT.testing("Integrity") then 868 if APT.testing("Integrity") then
866 local status = APT.exe( "gpgv --keyring /usr/share/keyrings/devuan-keyring.gpg results/" .. host .. "/merged/dists/" .. n .. '/' .. o .. 869 local status = APT.exe( "gpgv --keyring " .. keyring .. " results/" .. host .. "/merged/dists/" .. n .. '/' .. o ..
867 " results/" .. host .. "/merged/dists/" .. n .. '/' .. o:sub(1, -5)):Nice():noErr():log():Do().status 870 " results/" .. host .. "/merged/dists/" .. n .. '/' .. o:sub(1, -5)):Nice():noErr():log():Do().status
868 if 0 ~= status then E("GPG check failed for " .. host .. "/merged/dists/" .. n .. '/' .. o, "http", "Integrity", host) end 871 if 0 ~= status then E("GPG check failed for " .. host .. "/merged/dists/" .. n .. '/' .. o, "http", "Integrity", host) end
869-- TODO - should check the PGP sig of InRelease as well. 872-- TODO - should check the PGP sig of InRelease as well.