oops, new default archives have corrupt extensions
better check if a package is now signed
Merge branch 'master' into file-pkgcache

* master:
  better check if a package is now signed
  oops, new default archives have corrupt extensions
always make a cache of local packages
read the files db if present (check signature too)