archive: Disable dsc signature verification for non-Debian.

Ubuntu doesn't have a unified keyring of developers like Debian has, so
it is not feasible to check for the dsc signatures.

Signed-off-by: Mattia Rizzolo <mattia@debian.org>
This commit is contained in:
Mattia Rizzolo 2019-08-12 13:41:16 +02:00
parent ad6d560a15
commit e0f6b6f97b
No known key found for this signature in database
GPG Key ID: 0816B9E18C762BAD

View File

@ -236,7 +236,7 @@ class SourcePackage(object):
yield self._mirror_url(mirror, name)
yield self._lp_url(name)
def pull_dsc(self, verify_signature=True):
def pull_dsc(self, verify_signature=False):
"Retrieve dscfile and parse"
if self._dsc_source:
parsed = urlparse(self._dsc_source)
@ -359,7 +359,7 @@ class SourcePackage(object):
return False
return True
def pull(self, verify_signature=True):
def pull(self, verify_signature=False):
"Pull into workdir"
self._write_dsc(verify_signature=verify_signature)
for entry in self.dsc['Files']: