disable external key server

Upstream-Status: Pending

When RPM experiences a signed package, with a signature that it does NOT know.
By default it will send the -fingerprint- (and only the 16 digit fingerprint) to
an external HKP server, trying to get the key down.

This is probably not a reasonable default behavior for the system to do, instead
it should simply fail the key lookup.  If someone wants to enable the HKP server
it's easy enough to do by enabling the necessary macros.

Signed-off-by: yzhu1 <yanjun.zhu@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Index: rpm/macros/macros.in
===================================================================
--- rpm.orig/macros/macros.in
+++ rpm/macros/macros.in
@@ -563,10 +563,10 @@ $_arbitrary_tags_tests	Foo:Bar
 
 # Horowitz Key Protocol server configuration
 #
-%_hkp_keyserver         hkp://keys.rpm5.org
+#%_hkp_keyserver         hkp://keys.rpm5.org
 #%_hkp_keyserver         hkp://keys.n3npq.net
 #%_hkp_keyserver         hkp://pool.sks-keyservers.net
-%_hkp_keyserver_query   %{_hkp_keyserver}/pks/lookup?op=get&search=
+#%_hkp_keyserver_query   %{_hkp_keyserver}/pks/lookup?op=get&search=
 
 
 # NSS_InitContext() parameter configuration