From 41943477ecd818eb82a094bce321ea21f7ed8237 Mon Sep 17 00:00:00 2001 From: Norbert Preining Date: Sun, 1 Apr 2018 00:49:11 +0000 Subject: update docs on new crypto option git-svn-id: svn://tug.org/texlive/trunk@47211 c570f23f-e606-0410-a88d-b1316a301751 --- Master/texmf-dist/scripts/texlive/tlmgr.pl | 23 +++++++++++------------ 1 file changed, 11 insertions(+), 12 deletions(-) diff --git a/Master/texmf-dist/scripts/texlive/tlmgr.pl b/Master/texmf-dist/scripts/texlive/tlmgr.pl index 0e944e8dd77..657a32f5cbf 100755 --- a/Master/texmf-dist/scripts/texlive/tlmgr.pl +++ b/Master/texmf-dist/scripts/texlive/tlmgr.pl @@ -9075,18 +9075,17 @@ main repository be signed, but not any additional repositories. If C is not available, signatures are not checked and no verification is carried out, but C proceeds normally. -The verification can be controlled by the c - - -TODO TODO - -The attempted verification can be suppressed entirely by specifying -C<--verify-repos=none> on the command line, or a line -C in a C config file (see L). On the other hand, you can I successful -verification of all repos by specifying C<--require-verification> on the command -line, or C in a C config file; in this -case, if verification is not possible, or fails, the program quits. +The behaviour of the verification can be controlled by the command line +and config file option C which takes one of the following +values: C, C
, or C. In case of C, no verification +whatsoever is attempted, similar to the case when not GnuPG can be found. +In case of C
(the default) verification is required only for +the main repository, but attempted for all. Missing signatures of +subsidiary repositories will not result in an error. +Finally, in the case of C, all repositories need to be signed. + +In all cases when a signature is checked and fails to verify, an error +is raised. Cryptographic verification requires checksum checking (described just above) to succeed, and a working GnuPG (C) program (see below for -- cgit v1.2.3