summaryrefslogtreecommitdiff
path: root/libre/pacman/9002-pacman-key-updatedb.patch
diff options
context:
space:
mode:
Diffstat (limited to 'libre/pacman/9002-pacman-key-updatedb.patch')
-rw-r--r--libre/pacman/9002-pacman-key-updatedb.patch17
1 files changed, 17 insertions, 0 deletions
diff --git a/libre/pacman/9002-pacman-key-updatedb.patch b/libre/pacman/9002-pacman-key-updatedb.patch
new file mode 100644
index 000000000..97a7c3378
--- /dev/null
+++ b/libre/pacman/9002-pacman-key-updatedb.patch
@@ -0,0 +1,17 @@
+this helps to ensure that an expired key will be trusted again,
+immediately after the updated keyring package is installed
+
+diff --git a/scripts/pacman-key.sh.in b/scripts/pacman-key.sh.in
+index f7f1dd6..c5fb73f 100644
+--- a/scripts/pacman-key.sh.in
++++ b/scripts/pacman-key.sh.in
+@@ -599,7 +599,8 @@ verify_sig() {
+
+ updatedb() {
+ msg "$(gettext "Updating trust database...")"
+- if ! "${GPG_PACMAN[@]}" --batch --check-trustdb ; then
++ # --yes forces regeneration of trustdb, allowing expired keys to be trusted again
++ if ! "${GPG_PACMAN[@]}" --batch --check-trustdb --yes ; then
+ error "$(gettext "Trust database could not be updated.")"
+ exit 1
+ fi