> Could someone please briefly review two patches above? Thanks.

Revocation signatures are only valid if they are a valid signature of the key 
being revoked, and are made by either the key being revoked or a key that it 
has designated as valid for revocation.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1598#issuecomment-810536776
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint

Reply via email to