From 4b40f90ddbe5ce9ee74aec781abb5419e9b43918 Mon Sep 17 00:00:00 2001 From: Julien Cristau Date: Mon, 25 Mar 2013 15:20:31 +0100 Subject: Move extract_release_components to after signature verification. Suggested by Ansgar Burchardt. --- debian/changelog | 2 ++ functions | 3 ++- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index 8dc903e..1449609 100644 --- a/debian/changelog +++ b/debian/changelog @@ -2,6 +2,8 @@ debootstrap (1.0.48) UNRELEASED; urgency=low * Disable InRelease support. gpgv won't give us back the signed data, and full gpg is not available inside d-i (closes: #703889). + * Move extract_release_components to after signature verification. + Suggested by Ansgar Burchardt. -- Julien Cristau Mon, 25 Mar 2013 14:16:19 +0100 diff --git a/functions b/functions index 068aa06..2dc777d 100644 --- a/functions +++ b/functions @@ -532,11 +532,12 @@ download_release_indices () { get "$m1/dists/$SUITE/Release" "$reldest" nocache || error 1 NOGETREL "Failed getting release file %s" "$m1/dists/$SUITE/Release" relsigdest="$TARGET/$($DLDEST rel "$SUITE" "$m1" "dists/$SUITE/Release.gpg")" - extract_release_components $reldest progress 100 100 DOWNREL "Downloading Release file" download_release_sig "$m1" "$reldest" "$relsigdest" + extract_release_components $reldest + local totalpkgs=0 for c in $COMPONENTS; do local subpath="$c/binary-$ARCH/Packages" -- cgit v0.12