blob: 6ff1445c4b76e56fc5f2eb3eccb39773e499c8d5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
# Copyright 1999-2024 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
DESCRIPTION="OpenPGP keys used by OpenSSL"
HOMEPAGE="https://www.openssl.org/"
OSSL_FINGERPRINTS=(
# OpenSSL <openssl@openssl.org>
# See https://openssl-library.org/source/
BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
)
# We keep older keys here for now to allow verifying older & newer
# releases with the same keyring package. We'll drop them eventually.
#
# https://github.com/openssl/openssl/issues/19566
# https://github.com/openssl/openssl/issues/19567
OSSL_OLD_FINGERPRINTS=(
# Matt Caswell <matt@openssl.org>
5B2545DAB21995F4088CEFAA36CEE4DEB00CFE33
# Paul Dale <pauli@openssl.org>
8657ABB260F056B1E5190839D9C4D26D0E604491
# Tim Hudson <tjh@openssl.org>
B7C1C14360F353A36862E4D5231C84CDDCC69C45
# Hugo Landau <hlandau@openssl.org>
95A9908DDFA16830BE9FB9003D30A3A9FF1360DC
# Tomas Mraz <tomas@openssl.org>
A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
# Richard Levitte <levitte@openssl.org>
7953AC1FBC3DC8B3B292393ED5E9E43F7DF9EE8C
# Kurt Roeckx <kurt@openssl.org>
E5E52560DD91C556DDBDA5D02064C53641C25E5D
# OpenSSL OMC (see https://github.com/openssl/openssl/commit/f925bfebbb287321133b9251e72bee869a0f58b4)
EFC0A467D613CB83C7ED6D30D894E2CE8B3D79F5
)
ossl_key=
for ossl_key in "${OSSL_FINGERPRINTS[@]}" ; do
SRC_URI+=" https://keys.openpgp.org/vks/v1/by-fingerprint/${ossl_key} -> openssl-keys-${PV}-${ossl_key}.asc"
done
for ossl_key in "${OSSL_OLD_FINGERPRINTS[@]}" ; do
SRC_URI+=" https://dev.gentoo.org/~sam/distfiles/${CATEGORY}/${PN}/openssl-keys-20240424-${ossl_key}.asc"
done
unset ossl_key
S="${WORKDIR}"
LICENSE="public-domain"
SLOT="0"
KEYWORDS="~alpha amd64 arm arm64 hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86"
src_install() {
local files=( ${A} )
insinto /usr/share/openpgp-keys
newins - openssl.org.asc < <(cat "${files[@]/#/${DISTDIR}/}" || die)
}
|