Bug#642480: apt-key uses gpg --list-sigs instead of --check-sigs

[Chris Frey <cdfrey@foursquare.net>]

On Fri, Sep 23, 2011 at 12:44:55AM +0200, Julian Andres Klode wrote:
> It is a bug for Ubuntu. Debian's apt-key does not support net-update and
> is thus not affected.

I'm not sure that's true.  On my system, with apt 0.8.10.3+squeeze1,
there is definitely a net-update command available:

case "$command" in
    add)
        $GPG --quiet --batch --import "$1"
        echo "OK"
        ;;
    del|rm|remove)
        $GPG --quiet --batch --delete-key --yes "$1"
        echo "OK"
        ;;
    update)
        update
        ;;
    net-update)
        net_update

But regardless of net-update, I think the real bug is the reliance on
--list-sigs instead of --check-sigs.

- Chris