[Rpm-maint] [rpm-software-management/rpm] Installation / verification should not pass if the (sub)key(s) has been revoked or expired (#1598)

[Michael Schroeder]

Note the following text from the gpgv manpage:
```
gpgv2  assumes  that  all keys in the keyring are trustworthy.  That does also mean that it does not check for expired or revoked keys.
```
So we're in good company ;-)


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1598#issuecomment-872255504
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210701/6a406965/attachment.html>