Add the copy the sig to the destination file when the skip verificati…

…on is true
carnifexx · Aug 20, 2019 · 7685246 · 7685246
1 parent df5a524
commit 7685246
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java b/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java
@@ -215,6 +215,7 @@ public boolean checkSignature(MultiStepProgress progress, URL signatureUrl, Prog
       download(signatureUrl, packageIndexSignatureTemp, progress, statusText, progressListener, true);
 
       if (skipVerification) {
+        Files.move(packageIndexSignatureTemp.toPath(), packageIndexSignature.toPath(), StandardCopyOption.REPLACE_EXISTING);
         log.info("Allowing insecure packages because allow_insecure_packages is set to true in preferences.txt" +
           " but the signature was download");
         return true;