[gentoo-commits] repo/gentoo:master commit in: net-mail/dovecot/

[Sam James]

commit:     43cd06a59103c83bb80d4550d41bfcb1dde8f877
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Thu Jan 22 05:20:56 2026 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Sat Feb 21 08:50:14 2026 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=43cd06a5

net-mail/dovecot: wire up verify-sig

Signed-off-by: Sam James <sam <AT> gentoo.org>

 net-mail/dovecot/Manifest                |  2 ++
 net-mail/dovecot/dovecot-2.4.2-r2.ebuild | 24 +++++++++++++++++++++++-
 2 files changed, 25 insertions(+), 1 deletion(-)

diff --git a/net-mail/dovecot/Manifest b/net-mail/dovecot/Manifest
index 1aede2e868ad..8734f53a82db 100644
--- a/net-mail/dovecot/Manifest
+++ b/net-mail/dovecot/Manifest
@@ -1,4 +1,6 @@
 DIST dovecot-2.3-pigeonhole-0.5.21.1.tar.gz 1956404 BLAKE2B 
ad0ea5c2c181aa9cdf12a7b58141a9812cad11e6ead4d4f38366e13589a84135db1998da179192a6e66a53240647906d96bb330982e7f2f204ba8c402f14cbbd
 SHA512 
7387b417611599fe70d1a83d3b408321e66f5a883bf78a9d55c7496b1a17220677daebaefde2061e0d7064fe07c410ecfc64662878bb253ddcd9e128dd83fbaa
 DIST dovecot-2.3.21.1.tar.gz 7842044 BLAKE2B 
3f4238a2f6a73bce1ed37d0def7dc2e61823173836879ed8b4ef5806b4403300335d551215fc4fb2ee8b4106276f84d16b24c2be53148b92da3f946a3b904e46
 SHA512 
9de6ce3a579ef2040248b692874a6d64a732bb735a9cee3144604927cad49690c4b0e29f7ecf3af23190d56f30956d955d13acd5d352534df62fbdfde4b60f9f
 DIST dovecot-2.4.2.tar.gz 7807240 BLAKE2B 
20c3e0e4aea36cdd7e13a62ffc287cc3950a41a5d900ff00a48b2eba81ac2db85005c7fa6aec969d6615f4327fa0076572a607a0bbcbf620b6151dd09c6c09b7
 SHA512 
0524695341abe711d3a811c56156889d6fef7a09becc684c6f1dc1e5add605969ca8794eb7d44bfbc49f70515f22e8640b5828443addecfe4798fb8b174670ae
+DIST dovecot-2.4.2.tar.gz.sig 119 BLAKE2B 
ac61308ea7c61a68b642cf7913c0d5e4dd21d651aaeda2e3c1ab10055ce7f3f2d2966a024ca8724519d59722416216dab3424f3f324d98197ee078891a2d31b0
 SHA512 
38f050363fef9f97282e69fb24705d480b7684f79fadf69df0edc509487614c29d9d0fba382e0b37aee2529878f51564e3243fac9a6f767028039f36503a64fb
 DIST dovecot-pigeonhole-2.4.2.tar.gz 2071623 BLAKE2B 
2364f8e58b348c45b3d03646e07949a8c71e1bb7bb856fd9db61a919f53ba8440ca54d0ed1e5b7110597ace03e2e1c1edf52a4fc086af1dd786a30f713806619
 SHA512 
82c46c7ac2792aa5c211c8b66309f9f21c05ecd2fa8ab3abf98fb4e05831fd37aaa3edffcfbe1b3defbb9ac8ef9df1c33ece83cf7524e8b226c4deab8c250134
+DIST dovecot-pigeonhole-2.4.2.tar.gz.sig 119 BLAKE2B 
4c680a892fe3797de4c1e3d6f69790b0117e84ccfb65c74cc995f5cec5add13de9a88b9d6f8b197733759b65a793f345639f9e20c2cd42848ce686010666857c
 SHA512 
8a4eeab00e148c9bf1d5e260e5884a10ceb589cf4f3b7e8219a37af3e28c02b18c91f1455adc33302e026617d66068e64bad9e60231642e0b2505fa5003f01f1

diff --git a/net-mail/dovecot/dovecot-2.4.2-r2.ebuild 
b/net-mail/dovecot/dovecot-2.4.2-r2.ebuild
index 4c55d80203fe..37e4b39e4512 100644
--- a/net-mail/dovecot/dovecot-2.4.2-r2.ebuild
+++ b/net-mail/dovecot/dovecot-2.4.2-r2.ebuild
@@ -6,7 +6,9 @@ EAPI=8
 LUA_COMPAT=( lua5-{3..4} )
 # do not add a ssl USE flag.  ssl is mandatory
 SSL_DEPS_SKIP=1
-inherit autotools dot-a eapi9-ver flag-o-matic lua-single ssl-cert systemd 
toolchain-funcs
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/dovecot.asc
+inherit autotools dot-a eapi9-ver flag-o-matic lua-single ssl-cert systemd
+inherit toolchain-funcs verify-sig
 
 MY_P="${P/_/.}"
 MY_PV="${PV}"
@@ -17,9 +19,18 @@ HOMEPAGE="https://www.dovecot.org/";
 SRC_URI="https://www.dovecot.org/releases/${major_minor}/${MY_P}.tar.gz
        sieve? (
        
https://pigeonhole.dovecot.org/releases/${major_minor}/${PN}-pigeonhole-${MY_PV}.tar.gz
+               verify-sig? (
+               
https://pigeonhole.dovecot.org/releases/${major_minor}/${PN}-pigeonhole-${MY_PV}.tar.gz.sig
+               )
        )
        managesieve? (
        
https://pigeonhole.dovecot.org/releases/${major_minor}/${PN}-pigeonhole-${MY_PV}.tar.gz
+               verify-sig? (
+               
https://pigeonhole.dovecot.org/releases/${major_minor}/${PN}-pigeonhole-${MY_PV}.tar.gz.sig
+               )
+       )
+       verify-sig? (
+       https://www.dovecot.org/releases/${major_minor}/${MY_P}.tar.gz.sig
        ) "
 S="${WORKDIR}/${MY_P}"
 PIEGONHOLE_S="../dovecot-pigeonhole-${MY_PV}"
@@ -86,6 +97,7 @@ BDEPEND="virtual/pkgconfig
                        ')
                )
        )
+       verify-sig? ( sec-keys/openpgp-keys-dovecot )
        "
 
 PATCHES=(
@@ -101,6 +113,16 @@ pkg_setup() {
        fi
 }
 
+src_unpack() {
+       if use verify-sig; then
+               verify-sig_verify_detached "${DISTDIR}"/${MY_P}.tar.gz{,.sig}
+               use sieve && verify-sig_verify_detached 
"${DISTDIR}"/${PN}-pigeonhole-${MY_PV}.tar.gz{,.sig}
+               use managesieve && verify-sig_verify_detached 
"${DISTDIR}"/${PN}-pigeonhole-${MY_PV}.tar.gz{,.sig}
+       fi
+
+       default
+}
+
 src_prepare() {
        default