(_check) only warn about missing signature for local packages

(aka those _not_ coming from any medium)

rationale:
we downgrade the missing signature check for local packages from a
question (defaulting to "n") to a warning, thus fixing a testsuite
regression introduced in 7.4

2 files changed, 3 insertions, 1 deletions

diff --git a/NEWS b/NEWS
index bc595b35..3cb93a09 100644
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,8 @@
 - security:
   o downgrade missing medium key check question to a warning for virtual media
     without keys when using urpmi --use-distrib
+  o downgrade missing signature check for local packages from a question to a
+    warning
   o honor per medium "verify-rpm" option for missing signature check
   o media have keys, not signatures
 - unrequested package list management (for orphans) (mga#7167):
diff --git a/urpm/signature.pm b/urpm/signature.pm
index 94a2118f..1f003e5b 100644
--- a/urpm/signature.pm
+++ b/urpm/signature.pm
@@ -45,7 +45,7 @@ sub _check {
 	    if (!$medium) {
 		if ($verif =~ /OK \(\(none\)\)/) {
 	            $verif =~ s/\n//g;
-	            $invalid_sources{$filepath} = N("Missing signature (%s)", $verif);
+	            $urpm->{info}(N("The following package has no signature (%s): %s\n", $verif, $filepath));
 	        }
 		next;
 	    }