[pacman-dev] [PATCH 2/3] makepkg: Treat a signature from an untrusted key as an error

[Thomas Bächler]

---
 scripts/makepkg.sh.in | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/scripts/makepkg.sh.in b/scripts/makepkg.sh.in
index 4c235cf..015bdd7 100644
--- a/scripts/makepkg.sh.in
+++ b/scripts/makepkg.sh.in
@@ -1303,6 +1303,9 @@ check_pgpsigs() {
                        if grep -q "REVKEYSIG" "$statusfile"; then
                                printf '%s (%s)' "$(gettext "FAILED")" 
"$(gettext "the key has been revoked.")" >&2
                                errors=1
+                       elif grep -q -e "TRUST_UNDEFINED" -e "TRUST_NEVER" 
"$statusfile"; then
+                               printf '%s (%s)' "$(gettext "FAILED")" 
"$(gettext "the key is not trusted")" >&2
+                               errors=1
                        else
                                printf '%s' "$(gettext "Passed")" >&2
                                if grep -q "EXPSIG" "$statusfile"; then
-- 
1.9.0