Merge pull request #531 from lubosmj/logical-operator-fix-6077

Fix an invalid logical operator
pulp · Feb 12, 2020 · 9aac516 · 9aac516
2 parents 700366e + fcdfa8d
commit 9aac516
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGES/6077.bugfix b/CHANGES/6077.bugfix
@@ -0,0 +1 @@
+Fix a bug that could cause an inability to detect an invalid signing script during the validation
diff --git a/pulpcore/app/models/content.py b/pulpcore/app/models/content.py
@@ -430,7 +430,7 @@ def save(self, *args, **kwargs):
                         import_result = gpg.import_keys(key.read())
                         verified = gpg.verify_file(fp, temp_file.name)
                         if verified.trust_level is None \
-                                and verified.trust_level < verified.TRUST_FULLY:
+                                or verified.trust_level < verified.TRUST_FULLY:
                             raise RuntimeError(
                                 "A signature could not be verified or a trust level is too low. "
                                 "The signing script may generate invalid signatures."