Add the copy the sig to the destination file when the skip verification is true

1 files changed, 1 insertions, 0 deletions

diff --git a/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java b/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java
index 6503e8d4f..ac5677212 100644
--- a/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java
+++ b/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java
@@ -215,6 +215,7 @@ public class DownloadableContributionsDownloader {
       download(signatureUrl, packageIndexSignatureTemp, progress, statusText, progressListener, true);
 
       if (skipVerification) {
+        Files.move(packageIndexSignatureTemp.toPath(), packageIndexSignature.toPath(), StandardCopyOption.REPLACE_EXISTING);
         log.info("Allowing insecure packages because allow_insecure_packages is set to true in preferences.txt" +
           " but the signature was download");
         return true;