Added flag to allow ignoring signature check on package_index.json

Author: cmaglie

Diff for: arduino-core/src/cc/arduino/contributions/packages/ContributionsIndexer.java

@@ -78,7 +78,7 @@ public ContributionsIndexer(File preferencesFolder, Platform platform, Signature
 
   public void parseIndex() throws Exception {
     File defaultIndexFile = getIndexFile(Constants.DEFAULT_INDEX_FILE_NAME);
-    if (!signatureVerifier.isSigned(defaultIndexFile)) {
+    if (!PreferencesData.getBoolean("allow_insecure_packages") && !signatureVerifier.isSigned(defaultIndexFile)) {
       throw new SignatureVerificationFailedException(Constants.DEFAULT_INDEX_FILE_NAME);
     }
     index = parseIndex(defaultIndexFile);

Diff for: build/shared/lib/preferences.txt

@@ -269,3 +269,10 @@ serial.debug_rate=9600
 
 # default chosen language (none for none)
 editor.languages.current = 
+
+# Debugging/Development Preferences
+# ---------------------------------
+
+# Disable signature check on packages_index.json, use only for
+# development/debugging purposes. Do not enable in production.
+#allow_insecure_packages=true