repo: new function ostree_repo_remote_get_gpg_verify_summary

It allows to specify whether GPG verification for the summary file is
enabled for a specific repository.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

doc/ostree-sections.txt

@@ -233,6 +233,7 @@ ostree_repo_remote_change
 ostree_repo_remote_list
 ostree_repo_remote_get_url
 ostree_repo_remote_get_gpg_verify
+ostree_repo_remote_get_gpg_verify_summary
 ostree_repo_remote_gpg_import
 ostree_repo_remote_fetch_summary
 ostree_repo_get_parent

doc/ostree.repo-config.xml

@@ -148,6 +148,15 @@ Boston, MA 02111-1307, USA.
         manual under GPG.</para></listitem>
       </varlistentry>
 
+      <varlistentry>
+        <term><varname>gpg-verify-summary</varname></term>
+        <listitem><para>A boolean value, defaults to false.
+        Controls whether or not OSTree will check if the summary
+        is signed by a known GPG key.
+        For more information, see the <citerefentry><refentrytitle>ostree</refentrytitle><manvolnum>1</manvolnum></citerefentry>
+        manual under GPG.</para></listitem>
+      </varlistentry>
+
       <varlistentry>
         <term><varname>tls-permissive</varname></term>
         <listitem><para>A boolean value, defaults to false.  By

src/libostree/ostree-repo.c

@@ -1272,6 +1272,29 @@ ostree_repo_remote_get_gpg_verify (OstreeRepo  *self,
                                                 TRUE, out_gpg_verify, error);
 }
 
+/**
+ * ostree_repo_remote_get_gpg_verify_summary:
+ * @self: Repo
+ * @name: Name of remote
+ * @out_gpg_verify_summary: (out) (allow-none): Remote's GPG option
+ * @error: Error
+ *
+ * Return whether GPG verification of the summary is enabled for the remote
+ * named @name through @out_gpg_verify_summary.  It is an error if the provided
+ * remote does not exist.
+ *
+ * Returns: %TRUE on success, %FALSE on failure
+ */
+gboolean
+ostree_repo_remote_get_gpg_verify_summary (OstreeRepo  *self,
+                                           const char  *name,
+                                           gboolean    *out_gpg_verify_summary,
+                                           GError     **error)
+{
+  return _ostree_repo_get_remote_boolean_option (self, name, "gpg-verify-summary",
+                                                 FALSE, out_gpg_verify_summary, error);
+}
+
 /**
  * ostree_repo_remote_gpg_import:
  * @self: Self

src/libostree/ostree-repo.h

@@ -112,6 +112,11 @@ gboolean      ostree_repo_remote_get_gpg_verify (OstreeRepo  *self,
                                                  gboolean    *out_gpg_verify,
                                                  GError     **error);
 
+gboolean      ostree_repo_remote_get_gpg_verify_summary (OstreeRepo  *self,
+                                                         const char  *name,
+                                                         gboolean    *out_gpg_verify_summary,
+                                                         GError     **error);
+
 gboolean      ostree_repo_remote_gpg_import (OstreeRepo         *self,
                                              const char         *name,
                                              GInputStream       *source_stream,