http://lists.pld-linux.org/mailman/pipermail/pld-devel-en/2015-February/024241.html

--- rpm-5.4.15/lib/verify.c~	2015-02-11 12:07:41.000000000 +0200
+++ rpm-5.4.15/lib/verify.c	2015-02-11 17:31:05.418447510 +0200
@@ -563,6 +563,7 @@
 
   {
     /* Verify header digest/signature. */
+#if NOTYET
     if (qva->qva_flags & (VERIFY_DIGEST | VERIFY_SIGNATURE))
     {
 	const char * horigin = headerGetOrigin(h);
@@ -577,6 +578,7 @@
 	uh = _free(uh);
 	msg = _free(msg);
     }
+#endif
 
     /* Verify file digests. */
     if (fc > 0 && (qva->qva_flags & VERIFY_FILES))