29 May
2017
29 May
'17
8:37 p.m.
Le 29/05/2017 à 07:31, Brandon Milton a écrit :
While exploring the pacman mirror layout (ie what is hosted by mirrors), I noticed that for each package, there are two copies of the same signature: one in %PGPSIG% in the desc file of the database and one in the {package}-{version}.pkg.tar.gz.sig file
I understand that for the AUR, the .sig file is necessary given that there is no official database.
Just one thing: AFAIK, they are no .sig files in the AUR.