pull: Verify checksums from static deltas unless gpg signed summary
authorAlexander Larsson <alexl@redhat.com>
Mon, 19 Oct 2015 07:23:52 +0000 (09:23 +0200)
committerAlexander Larsson <alexl@redhat.com>
Tue, 10 Nov 2015 07:56:15 +0000 (08:56 +0100)
commit598afd5030bbc0b1c4aa3d43d383d6fec58e3746
tree55c7be439fc68e2a3649b2a279995cf5296cd2d5
parentec56fea82170d2c60406ccd6369dafbdad2a14d7
pull: Verify checksums from static deltas unless gpg signed summary

Otherwise untrusted repos can lie about the commit ids.
src/libostree/ostree-repo-pull.c