Re: [arch-general] Clarification on pacman signature verification

2016-01-25 Thread Eli Schwartz
On 01/25/2016 01:35 PM, Solomon Lam wrote: > Thanks for the reply. I think I got my answer. > > I noticed that the 'desc' file of a package(inside the db) contains 'md5' > and 'sha256' checksums as well. So, does pacman perform pgp verification or > checksum verification during installation? It j

Re: [arch-general] Clarification on pacman signature verification

2016-01-25 Thread Solomon Lam
Thanks for the reply. I think I got my answer. I noticed that the 'desc' file of a package(inside the db) contains 'md5' and 'sha256' checksums as well. So, does pacman perform pgp verification or checksum verification during installation? On Mon, Jan 25, 2016 at 8:08 PM, Eli Schwartz wrote: >

Re: [arch-general] Clarification on pacman signature verification

2016-01-25 Thread Eli Schwartz
On 01/25/2016 04:43 AM, Solomon Lam wrote: > Hi, This is regarding package verification performed by pacman. > > Does pacman download the .sig file of a package while installing one? All I > could find are the local cached copies of packages only but not their > signatures. If thats the case, how

Re: [arch-general] Clarification on pacman signature verification

2016-01-25 Thread Doug Newgard
On Mon, 25 Jan 2016 15:13:24 +0530 Solomon Lam wrote: > Hi, This is regarding package verification performed by pacman. > > Does pacman download the .sig file of a package while installing one? All I > could find are the local cached copies of packages only but not their > signatures. If thats t

[arch-general] Clarification on pacman signature verification

2016-01-25 Thread Solomon Lam
Hi, This is regarding package verification performed by pacman. Does pacman download the .sig file of a package while installing one? All I could find are the local cached copies of packages only but not their signatures. If thats the case, how does pacman verify the integrity of the downloaded pa