I've been looking at various things related to rpm signatures and their
handling, and multiple signatures happens to be one of them.
Your use-case is not just a matter of more signatures though, it'd require a
particular verification policy and a way to express that within rpm as well,
roughly: between multiple signatures of same type (signer role-wise) it's
sufficient to have one that verifies and others can be ignored.
You couldn't possibly have brought that use-case up at a better time, because
in my early plans that case simply wouldn't have been possible. No promises at
this point, except that I will take this into consideration at least.
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/189#issuecomment-292089227
_______________________________________________
Rpm-maint mailing list
[email protected]
http://lists.rpm.org/mailman/listinfo/rpm-maint
