Bug#872543: apt does not honor trusted=yes from sources.list

[Julian Andres Klode <jak@debian.org>]

On Sat, Apr 06, 2019 at 03:30:52PM +0200, John Paul Adrian Glaubitz wrote:
> Package: apt
> Version: 1.8.0
> Followup-For: Bug #872543
> 
> Hello!
> 
> I can reproduce this particular bug. I just tried building debian-installer on
> ia64 using snapshot.debian.org and neither passing "trusted=yes" nor "check-
> valid-until=no" has any impact on APT checking the signatures.

It works just fine, both check-valid-until and check-date work fine:

deb [trusted=yes check-valid-until=no] http://snapshot.debian.org/archive/debian/20130507T220417Z/ unstable main
deb [trusted=yes check-date=no] http://snapshot.debian.org/archive/debian/20130507T220417Z/ unstable main

maybe you separated the options by comma instead of space?

Whether trusted=yes should imply check-date=no, I'm uncertain. Probably useful,
as it restricts number of possible combinations.

-- 
debian developer - deb.li/jak | jak-linux.org - free software dev
ubuntu core developer                              i speak de, en