From f6aee2f4772b2de1943aaa2c40f8fb6dd3185b92 Mon Sep 17 00:00:00 2001 From: Eelco Dolstra Date: Fri, 29 Apr 2016 16:28:57 +0200 Subject: BinaryCacheStore::queryPathInfo: Don't check signatures Other stores don't do this either. It's up to the caller to check signatures. --- src/libstore/binary-cache-store.cc | 10 +--------- 1 file changed, 1 insertion(+), 9 deletions(-) (limited to 'src/libstore/binary-cache-store.cc') diff --git a/src/libstore/binary-cache-store.cc b/src/libstore/binary-cache-store.cc index 6806c3e4ae..8b72977d66 100644 --- a/src/libstore/binary-cache-store.cc +++ b/src/libstore/binary-cache-store.cc @@ -18,11 +18,8 @@ BinaryCacheStore::BinaryCacheStore(std::shared_ptr localStore, const Path & secretKeyFile) : localStore(localStore) { - if (secretKeyFile != "") { + if (secretKeyFile != "") secretKey = std::unique_ptr(new SecretKey(readFile(secretKeyFile))); - publicKeys = std::unique_ptr(new PublicKeys); - publicKeys->emplace(secretKey->name, secretKey->toPublicKey()); - } StringSink sink; sink << narVersionMagic1; @@ -213,11 +210,6 @@ std::shared_ptr BinaryCacheStore::queryPathInfoUncached(const Pat stats.narInfoRead++; - if (publicKeys) { - if (!narInfo->checkSignatures(*publicKeys)) - throw Error(format("no good signature on NAR info file ‘%1%’") % narInfoFile); - } - return std::shared_ptr(narInfo); } -- cgit 1.4.1