verify-signature.patch

   1 diff -up poldek-0.42.2/pkgfetch.c._orig poldek-0.42.2/pkgfetch.c
   2 diff -up poldek-0.42.2/pm/rpmorg/signature.c._orig poldek-0.42.2/pm/rpmorg/signature.c
   3 --- poldek-0.42.2/pm/rpmorg/signature.c._orig   2021-03-19 15:02:55.589828096 +0100
   4 +++ poldek-0.42.2/pm/rpmorg/signature.c 2021-03-20 18:02:34.286105414 +0100
   5 @@ -177,6 +177,11 @@ static int do_verify_signature(const cha
   6      if (fdt != NULL && Ferror(fdt) == 0) {
   7          ts = rpmtsCreate();
   8          rpmtsSetVfyFlags(ts, vfyflags);
   9 +       if ((flags & (PKGVERIFY_PGP | PKGVERIFY_GPG)) == 0) {
  10 +           int vfylevel = rpmtsVfyLevel(ts);
  11 +           vfylevel &= ~RPMSIG_SIGNATURE_TYPE;
  12 +           rpmtsSetVfyLevel(ts, vfylevel);
  13 +       }
  14          rc = rpmVerifySignatures(&qva, ts, fdt, n_basenam(path));
  15          rpmtsFree(ts);
  16