summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThomas Deutschmann <whissi@gentoo.org>2021-11-08 16:14:43 +0100
committerThomas Deutschmann <whissi@gentoo.org>2021-11-08 16:14:54 +0100
commit1b0c2f134e2582bdb23a1e2f965e865dba1fbe47 (patch)
tree2d38e0dd310ba363413b04dd574801b22bdbedce /net-dns
parentapp-benchmarks/geekbench: drop old version (diff)
downloadgentoo-1b0c2f134e2582bdb23a1e2f965e865dba1fbe47.tar.gz
gentoo-1b0c2f134e2582bdb23a1e2f965e865dba1fbe47.tar.bz2
gentoo-1b0c2f134e2582bdb23a1e2f965e865dba1fbe47.zip
net-dns/dnssec-root: don't verify signature chain
We are only interested in verifying root-anchors.xml itself. We do not care about the signature chain. Closes: https://bugs.gentoo.org/822447 Package-Manager: Portage-3.0.28, Repoman-3.0.3 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
Diffstat (limited to 'net-dns')
-rw-r--r--net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild5
1 files changed, 3 insertions, 2 deletions
diff --git a/net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild b/net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild
index cf7ee395e9e4..7e91c6e3c83f 100644
--- a/net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild
+++ b/net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2020 Gentoo Authors
+# Copyright 1999-2021 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI="7"
@@ -36,7 +36,8 @@ src_prepare() {
openssl smime -verify \
-content root-anchors.xml \
-in root-anchors.p7s -inform der \
- -CAfile icannbundle.pem || die "OpenSSL S/Mime verify failed"
+ -CAfile icannbundle.pem \
+ -noverify || die "OpenSSL S/Mime verify failed"
else
einfo "dev-libs/openssl is not available, skipping optional validation root-anchors.xml"
fi