From d25aa1edd2fe787ec1fd9b2666d34fc147aa0118 Mon Sep 17 00:00:00 2001 From: Ruben Pollan Date: Thu, 10 Jul 2014 20:20:10 -0500 Subject: [PATCH] Continue if the keyid is not in keydb while checking signatures --- tuf/repository_lib.py | 1 + 1 file changed, 1 insertion(+) diff --git a/tuf/repository_lib.py b/tuf/repository_lib.py index d3ab8995..24916459 100755 --- a/tuf/repository_lib.py +++ b/tuf/repository_lib.py @@ -374,6 +374,7 @@ def _remove_invalid_and_duplicate_signatures(signable): except tuf.UnknownKeyError as e: signable['signatures'].remove(signature) + continue # Remove 'signature' from 'signable' if it is an invalid signature. if not tuf.keys.verify_signature(key, signature, signed):