GPG and checksum validation seems broken
Closed this issue · 2 comments
eliecharra commented
And btw the checksum verification should be done by default, and not only when GPG signature is turned on.
wbeuil commented
By default the checksum should be done:
Don't know why on your screenshot it says that no SHA256 file was found ... Can you retry a simple dctlenv install 0.5.0.
As for GPG sign validation, I'm not sure we should enforce it since not everybody wants to keep GPG public keys in their device, hence the opt-in feature.
eliecharra commented
cannot reproduce using the latest version
Closing for now