opkg gpgme

[George Xenoulis]

Hello all,

I'm using opkg with gpg enabled.
As far as I understand, in an opkg update,
the Packages file from the repository
is stored in /usr/lib/opkg/lists/<dist-name>.
If a Packages.sig is found in the repository, the Packages file is
also verified against it.

But, in opkg install <package name>. opkg tries to verify
/usr/lib/opkg/lists/<dist-name> against
/usr/lib/opkg/lists/<dist-name>.sig

Should /usr/lib/opkg/lists/<dist-name>.sig and Packages.sig (of the 
repository)
be the same files?

Anybody can shed some light on this?

George