[Rpm-maint] [rpm-software-management/rpm] Add support for RPMKEYRING_MERGE (PR #3526)

[Neal H. Walfield]

If a certificate is soft revoked (e.g., retired), then signatures made prior to the revocation (should) still validate.  So either the certificate was hard revoked, i.e., the key material was compromised, or a signature was made after the certificate was revoked.  Supporting either case doesn't make sense to me.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3526#issuecomment-2604754544
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/3526/c2604754544 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20250121/bda9f1b2/attachment.htm>