Le 29/05/2017 à 07:31, Brandon Milton a écrit :

> While exploring the pacman mirror layout (ie what is hosted by mirrors), I
> noticed that for each package, there are two copies of the same signature:
> one in %PGPSIG% in the desc file of the database and one in the
> {package}-{version}.pkg.tar.gz.sig file
>
> I understand that for the AUR, the .sig file is necessary given that there
> is no official database.

Just one thing: AFAIK, they are no .sig files in the AUR.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to