texlive[47211] Master/texmf-dist/scripts/texlive/tlmgr.pl: update

[commits+preining at tug.org]

Revision: 47211
          http://tug.org/svn/texlive?view=revision&revision=47211
Author:   preining
Date:     2018-04-01 02:49:11 +0200 (Sun, 01 Apr 2018)
Log Message:
-----------
update docs on new crypto option

Modified Paths:
--------------
    trunk/Master/texmf-dist/scripts/texlive/tlmgr.pl

Modified: trunk/Master/texmf-dist/scripts/texlive/tlmgr.pl
===================================================================
--- trunk/Master/texmf-dist/scripts/texlive/tlmgr.pl	2018-04-01 00:48:43 UTC (rev 47210)
+++ trunk/Master/texmf-dist/scripts/texlive/tlmgr.pl	2018-04-01 00:49:11 UTC (rev 47211)
@@ -9075,19 +9075,18 @@
 C<gpg> is not available, signatures are not checked and no verification
 is carried out, but C<tlmgr> proceeds normally.
 
-The verification can be controlled by the c
+The behaviour of the verification can be controlled by the command line 
+and config file option C<verify-repos> which takes one of the following
+values: C<none>, C<main>, or C<all>. In case of C<none>, no verification
+whatsoever is attempted, similar to the case when not GnuPG can be found.
+In case of C<main> (the default) verification is required only for
+the main repository, but attempted for all. Missing signatures of
+subsidiary repositories will not result in an error.
+Finally, in the case of C<all>, all repositories need to be signed.
 
+In all cases when a signature is checked and fails to verify, an error
+is raised.
 
-TODO TODO
-
-The attempted verification can be suppressed entirely by specifying
-C<--verify-repos=none> on the command line, or a line
-C<verify-repos = none> in a C<tlmgr> config file (see L<CONFIGURATION
-FILE FOR TLMGR>).  On the other hand, you can I<require> successful
-verification of all repos  by specifying C<--require-verification> on the command
-line, or C<require-verification=1> in a C<tlmgr> config file; in this
-case, if verification is not possible, or fails, the program quits.
-
 Cryptographic verification requires checksum checking (described just
 above) to succeed, and a working GnuPG (C<gpg>) program (see below for
 search method).  Then, unless cryptographic verification has been