Commit 9f15573

committed

Added warning about forcing untrusted contributions

1 parent bf439fd commit 9f15573Copy full SHA for 9f15573

File tree

-2

lines changed

-2

lines changed

Lines changed: 6 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -86,8 +86,12 @@ public void parseIndex() throws Exception {`
`86`	`86`	`File defaultIndexFile = getIndexFile(Constants.DEFAULT_INDEX_FILE_NAME);`
`87`	`87`	`if (defaultIndexFile.exists()) {`
`88`	`88`	`// Check main index signature`
`89`		`- if (!PreferencesData.areInsecurePackagesAllowed() && !signatureVerifier.isSigned(defaultIndexFile)) {`
`90`		`- throw new SignatureVerificationFailedException(Constants.DEFAULT_INDEX_FILE_NAME);`
	`89`	`+ if (!signatureVerifier.isSigned(defaultIndexFile)) {`
	`90`	`+ if (PreferencesData.areInsecurePackagesAllowed()) {`
	`91`	`+ System.err.println(format(tr("Warning: forced trusting untrusted contributions")));`
	`92`	`+ } else {`
	`93`	`+ throw new SignatureVerificationFailedException(Constants.DEFAULT_INDEX_FILE_NAME);`
	`94`	`+ }`
`91`	`95`	`}`
`92`	`96`
`93`	`97`	`mergeContributions(defaultIndexFile);`

Comments

(0)