diff options
| author |   Sam James <sam@gentoo.org> | 2023-12-24 16:08:51 +0000 |
|---|---|---|
| committer | Sam James <sam@gentoo.org> | 2023-12-24 16:12:30 +0000 |
| commit | de1b825d4a0911e3aab890d251f83961daae0c6b (patch) | |
| tree | 45c8ecfde82f6e2d8116c67f4a2049ab369f6745 /sys-devel/autoconf | |
| parent | net-libs/webkit-gtk: security cleanup (diff) | |
| download | gentoo-de1b825d4a0911e3aab890d251f83961daae0c6b.tar.gz gentoo-de1b825d4a0911e3aab890d251f83961daae0c6b.tar.bz2 gentoo-de1b825d4a0911e3aab890d251f83961daae0c6b.zip | |
sys-devel/autoconf: backport verify-sig to 2.69
Eric Blake signed 2.69 so use sec-keys/openpgp-keys-m4.
Signed-off-by: Sam James <sam@gentoo.org>
Diffstat (limited to 'sys-devel/autoconf')
| -rw-r--r-- | sys-devel/autoconf/Manifest | 1 | ||||
| -rw-r--r-- | sys-devel/autoconf/autoconf-2.69-r9.ebuild | 24 |
2 files changed, 22 insertions, 3 deletions
diff --git a/sys-devel/autoconf/Manifest b/sys-devel/autoconf/Manifest index 55e4c8e929d5..08c6d1ab3d7f 100644 --- a/sys-devel/autoconf/Manifest +++ b/sys-devel/autoconf/Manifest @@ -1,6 +1,7 @@ DIST autoconf-2.13.tar.gz 443844 BLAKE2B ade10f9d4a0b1a0e8b752eee817cfe100d77b074192b9892330402ddc5b62dda1a3485ce0c36e72191daa9fd49382b99851cb6aa3a13aca8cf2ae6e884638fb6 SHA512 602584f4c77b7a554aaa068eda5409b68eb0b3229e9c224bffb91c83c4314d25de15bd560a323626ff78f6df339c79e1ef8938c54b78ecadf4dc75c5241290ad DIST autoconf-2.69-runstatedir_patches.tar.xz 257096 BLAKE2B ae765e0ca7fe8261117f6f6b75611c232fc3d4016c22c86346afa72f2b7e6c3b7ccc1f9dfe134b2443f8bde6d578b503d79cf88472f76ce75b6c2e843ef55b8e SHA512 55f93299fe5243151f6bb782986a7935270f06d5065929f4d365a37aba05703e3ce66ecf7981d30413db50ee6b4f77d81d10a71b539c8a366c5c5a156c5443da DIST autoconf-2.69.tar.xz 1214744 BLAKE2B 71d33d72a06e9a05fbed0eda73bc9d8a3805c7c90bf082959862f93f3c5f01192114176e84d84ecb58fa99512eafbc0ab21ad1407be18c8c63bb3dc1117c482d SHA512 995d3e5a8eb1eb37e2b7fae53c6ec7a9b4df997286b7d643344818f94636756b1bf5ff5ea9155e755cb9461149a853dfbf2886fc6bd7132e5afa9c168e306e9b +DIST autoconf-2.69.tar.xz.sig 556 BLAKE2B 07eaae3429f4bbd3ea40b4b366db383d9e322b03def7956f8961a20a6759072e8c327d4723313097f75caba0513928c37270beda8f8b491888fdd47a2ee80ad6 SHA512 e54082e00522463ba7d6b6ea6d700b8799a41177b34e057dd72abbe46219f0ce58674575d60fb106e37deeee8871d4ccfd85746c2d0e096a71eb096ffdb3020c DIST autoconf-2.71.tar.xz 1292296 BLAKE2B 7fd4b98b4cfff10720e8da6ee91045637991643b50fcb3e47a0ecfcc01600f7b7b36fd1c0a5f08b68a418f1bdbd8d5a98de1008157595dd37cc3a31facb61416 SHA512 73d32b4adcbe24e3bafa9f43f59ed3b6efbd3de0f194e5ec90375f35da1199c583f5d3e89139b7edbad35171403709270e339ffa56a2ecb9b3123e9285021ff0 DIST autoconf-2.71.tar.xz.sig 833 BLAKE2B a2641a0bec3b475874811dd21dc32d34672f4f084ea16d48bd0655df37251be810026c20e35869503e664701edcb64f260b142db671e160a554c2ee982838355 SHA512 83e6bf4504f5d188cad1387ce1f1ce4b14f5ee4961bbfd5c83dd281d724392a95b394079bfaa093eb81129873e668b6ca1eee013a60cfb76edf34454756f6667 DIST autoconf-2.72.tar.xz 1389680 BLAKE2B 01caeced9e53d8bd39fb0cf4929322f0d463971b0a96368aa55892026897a9e98c2ca84a77db1b3c6c4483aea54b96da16a7bc00b7ac15e23c6b0471438012db SHA512 c4e9fbd858666d3e5c3b4fe7f89aa3e8e3a0a00dc7e166f8147d937d911b77ba3ac6a016f9d223ccdd830bc8960b3e60397c0607cc6a1fd2c50c7492839ddd17 diff --git a/sys-devel/autoconf/autoconf-2.69-r9.ebuild b/sys-devel/autoconf/autoconf-2.69-r9.ebuild index 7b16150352b6..75df5c300a16 100644 --- a/sys-devel/autoconf/autoconf-2.69-r9.ebuild +++ b/sys-devel/autoconf/autoconf-2.69-r9.ebuild @@ -7,10 +7,19 @@ if [[ ${PV} == 9999 ]] ; then EGIT_REPO_URI="https://git.savannah.gnu.org/git/autoconf.git" inherit git-r3 else - SRC_URI="mirror://gnu/${PN}/${P}.tar.xz + # Eric Blake signed 2.69 so use sec-keys/openpgp-keys-m4 + VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/m4.asc + inherit verify-sig + + SRC_URI=" + mirror://gnu/${PN}/${P}.tar.xz ftp://alpha.gnu.org/pub/gnu/${PN}/${P}.tar.xz - https://dev.gentoo.org/~polynomial-c/dist/${P}-runstatedir_patches.tar.xz" + https://dev.gentoo.org/~polynomial-c/dist/${P}-runstatedir_patches.tar.xz + verify-sig? ( mirror://gnu/${PN}/${P}.tar.xz.sig ) + " KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris" + + BDEPEND="verify-sig? ( sec-keys/openpgp-keys-m4 )" fi inherit toolchain-autoconf @@ -22,7 +31,7 @@ LICENSE="GPL-3+" SLOT="${PV}" IUSE="emacs" -BDEPEND=" +BDEPEND+=" >=sys-devel/m4-1.4.16 >=dev-lang/perl-5.6 " @@ -46,6 +55,15 @@ PATCHES=( "${WORKDIR}"/patches/${P}-texinfo.patch ) +src_unpack() { + if use verify-sig ; then + # Needed for downloaded patch (which is unsigned, which is fine) + verify-sig_verify_detached "${DISTDIR}"/${P}.tar.xz{,.sig} + fi + + default +} + src_prepare() { # usr/bin/libtool is provided by binutils-apple, need gnu libtool if [[ ${CHOST} == *-darwin* ]] ; then |