George Rawlinson pushed to branch main at Arch Linux / Packaging / Packages / 
rxvt-unicode


Commits:
09609c09 by T.J. Townsend at 2023-09-20T13:32:42-04:00
store signify public key locally

fetching it over http every time kinda defeats the purpose.
upstream currently refuses to implement https, so this is
mostly a waste of time either way.

- - - - -


2 changed files:

- PKGBUILD
- + signing-key.pub


Changes:

=====================================
PKGBUILD
=====================================
@@ -25,7 +25,7 @@ makedepends=(
 )
 
source=("$pkgname-$pkgver.tar.bz2::http://dist.schmorp.de/rxvt-unicode/$pkgname-$pkgver.tar.bz2";
         
"$pkgname-$pkgver.tar.bz2.signature::http://dist.schmorp.de/rxvt-unicode/$pkgname-$pkgver.tar.bz2.sig";
-        "$pkgname-$pkgver.pub::http://dist.schmorp.de/signing-key.pub";
+        'signing-key.pub'
         'perl-5.38.patch'
         'urxvt.desktop'
         'urxvtc.desktop'
@@ -48,7 +48,7 @@ 
sha512sums=('4d14ecbbb62de1b1c717277f5aae5cfb536e11392f2d4b82c884c1713f437fce8e9
 prepare() {
   # hacking around to validate with signify
   mv -v "$pkgname-$pkgver.tar.bz2."{signature,sig}
-  signify -V -p "$pkgname-$pkgver.pub" -m "$pkgname-$pkgver.tar.bz2"
+  signify -V -p "signing-key.pub" -m "$pkgname-$pkgver.tar.bz2"
 
   patch -d $pkgname-$pkgver -p1 < perl-5.38.patch # Locale fix for perl 5.38
 }


=====================================
signing-key.pub
=====================================
@@ -0,0 +1,2 @@
+untrusted comment: openbsd signify key for dist.schmorp.de, data.schmorp.de
+RWSUBDizLm/GKdlJp8Fr7pMD3pQbONEk+IqVldf+mQn0pYmkiCRDa22s



View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/rxvt-unicode/-/commit/09609c09cc27a3946d79bed665f661fd76466c49

-- 
View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/rxvt-unicode/-/commit/09609c09cc27a3946d79bed665f661fd76466c49
You're receiving this email because of your account on gitlab.archlinux.org.


Reply via email to