[Rpm-maint] [rpm-software-management/rpm] Check the validity of hash algo (PR #3416)

[Panu Matilainen]

In the meanwhile: if you can do so in your environment, turning on enforcing signature checking (that _pkgverify_level thing) is very much recommended, that's supported since 4.14.2. It's just that so many workflows are based around the traditional no-signature behavior that changing the upstream default is damn hard.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3416#issuecomment-2446937113
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/3416/c2446937113 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20241030/503ff420/attachment.html>