From: Philip Withnall <withnall@endlessm.com>
Date: Thu, 5 Oct 2017 10:14:41 +0000 (+0100)
Subject: lib/repo: Clarify that ostree_repo_remote_fetch_summary() doesn’t verify
X-Git-Tag: archive/raspbian/2022.1-3+rpi1~1^2~4^2~30^2~79
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=9350e8a4881fce066e16fadce0240233016bed4b;p=ostree.git

lib/repo: Clarify that ostree_repo_remote_fetch_summary() doesn’t verify

Make that a bit clearer in the documentation.

Signed-off-by: Philip Withnall <withnall@endlessm.com>

Closes: #1253
Approved by: cgwalters
---

diff --git a/src/libostree/ostree-repo.c b/src/libostree/ostree-repo.c
index 4357d562..59497353 100644
--- a/src/libostree/ostree-repo.c
+++ b/src/libostree/ostree-repo.c
@@ -1711,6 +1711,9 @@ out:
  * @NULL.  Likewise if the summary file is not signed, @out_signatures is
  * set to @NULL.  In either case the function still returns %TRUE.
  *
+ * This method does not verify the signature of the downloaded summary file.
+ * Use ostree_repo_verify_summary() for that.
+ *
  * Parse the summary data into a #GVariant using g_variant_new_from_bytes()
  * with #OSTREE_SUMMARY_GVARIANT_FORMAT as the format string.
  *