Added warning about forcing untrusted contributions

carnifexx · Aug 20, 2019 · 842c35b · 842c35b
1 parent 94dd695
commit 842c35b
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/arduino-core/src/cc/arduino/contributions/packages/ContributionsIndexer.java b/arduino-core/src/cc/arduino/contributions/packages/ContributionsIndexer.java
@@ -86,8 +86,12 @@ public void parseIndex() throws Exception {
     File defaultIndexFile = getIndexFile(Constants.DEFAULT_INDEX_FILE_NAME);
     if (defaultIndexFile.exists()) {
       // Check main index signature
-      if (!PreferencesData.areInsecurePackagesAllowed() && !signatureVerifier.isSigned(defaultIndexFile)) {
-        throw new SignatureVerificationFailedException(Constants.DEFAULT_INDEX_FILE_NAME);
+      if (!signatureVerifier.isSigned(defaultIndexFile)) {
+        if (PreferencesData.areInsecurePackagesAllowed()) {
+          System.err.println(format(tr("Warning: forced trusting untrusted contributions")));
+        } else {
+          throw new SignatureVerificationFailedException(Constants.DEFAULT_INDEX_FILE_NAME);
+        }
       }
 
       mergeContributions(defaultIndexFile);