Exit early after signature verification failure, since it's
typically inappropriate to try other mirrors in this case
(it may indicate a keyring problem).

Bug: https://bugs.gentoo.org/661838
---
 bin/emerge-webrsync | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/bin/emerge-webrsync b/bin/emerge-webrsync
index 560dd0236..b135567b7 100755
--- a/bin/emerge-webrsync
+++ b/bin/emerge-webrsync
@@ -191,6 +191,13 @@ check_file_signature() {
                                        fi
                                done <<< "${gnupg_status}"
                        fi
+                       if [[ ${r} -ne 0 ]]; then
+                               # Exit early since it's typically inappropriate 
to
+                               # try other mirrors in this case (it may 
indicate
+                               # a keyring problem).
+                               eecho "signature verification failed"
+                               exit 1
+                       fi
                else
                        eecho "cannot check signature: gpg binary not found"
                        exit 1
-- 
2.16.4


Reply via email to