search

grant-olson / rubygems-openpgp

This allows you to cryptographically sign ruby gems, so that a user can later verify that they've downloaded a copy that hasn't been tampered with or hacked.
http://www.rubygems-openpgp-ca.org
Other
32 stars 4 forks source link

Add --no-verify option #14

Closed Quintus closed 11 years ago

Quintus commented 11 years ago

Hi there,

if I place this in my ~/.gemrc:

install: --verify --get-key

This will instruct RubyGems to always verify any gem I install, which is fine. However, as most gems aren’t signed currently, this will usually cause an abort of the installation, without me being able to override this behaviour without altering my .gemrc file. Therefore I think a --no-verify option should be added that allows to override a default option of --verify.

Valete, Quintus

grant-olson commented 11 years ago

Shouldn't be a big deal. I'll set the milestone for the next release.

grant-olson commented 11 years ago

Okay. Done. The patch is simple enough that if I have to do a bugfix release before the next major release I'll include it. I'll also close the issue only after the fix is released.

grant-olson commented 11 years ago

0.4.0 released