Hello,
 
I am analyzing the code of libzypp and found RpmDb::checkPackage has never been used.
So, I think libzypp have not do digest/signature check before installing packages, right?
 
Is it by design, or missing?  I think it’s necessary.
 
 
--
Best regards,
Zhang Qiang
MeeGo Team, Open source Technology Center, SSG, Intel