Allan McRae 38da050f31 Download and verify package database signatures ... If signature verification is needed, attempt to download a signature file for a repo when it is updated. Return an error if unable to download signature only when checking is mandatory, or if signature is invalid. TODO: At the moment the database signature is only checked on download. Should we do anything with a database if it fails to be verified to prevent its future usage? Signed-off-by: Allan McRae <allan@archlinux.org>		2011-03-23 22:58:00 -05:00
..
libalpm	Download and verify package database signatures	2011-03-23 22:58:00 -05:00