Bug#978630: [pkg-gnupg-maint] Bug#978630: Bug#978630: gnupg: --check-sigs trusts weak digest alg if weak digest was trusted when importing key

[Werner Koch]

It gets cached if it has been checked.  There are some pre-conditions
for this for example the existance of the corresponding public key.