verify_pubsignature
if (verify_pubsignature(fd_pkg, fd_sig, NULL) == false)
if (verify_pubsignature(fd_pkg, fd_sig, repo) == false)