CMXSL.org/package-helpers-cmxsl
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Better gpg signature checking

Browse source
This commit is contained in:
Ruben Rodriguez 2019-11-01 14:11:35 -04:00
parent 1469f142e5
commit 59c7d6d689
1 changed files with 9 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

17
helpers/config
View file

@ -134,21 +134,16 @@ cd PACKAGES/$PACKAGE
apt-get update -c $LOCAL_APT/etc/apt.conf apt-get update -c $LOCAL_APT/etc/apt.conf
apt-get source $PACKAGE --download-only -c ${LOCAL_APT}/etc/apt.conf apt-get source $PACKAGE --download-only -c ${LOCAL_APT}/etc/apt.conf
# Verify it first # Verify it first
# Import the key for the package uploader if grep -q "BEGIN PGP SIGNATURE" *.dsc; then
# Use the one listed in the helper if available, otherwise download the one listed in the dsc KEY=$(gpg2 --keyid-format 0xlong --verify *.dsc 2>&1 | grep 0x | sed 's/.*0x//' || true)
if [ "1$SIGNKEY" != "1" ] ; then
apt-key --keyring ${LOCAL_APT}/etc/trusted.gpg adv --recv-keys --keyserver hkps://keyserver.ubuntu.com:443 $SIGNKEY > /dev/null
gpgv --keyring ${LOCAL_APT}/etc/trusted.gpg *.dsc
else
if grep -q "BEGIN PGP SIGNATURE" *.dsc; then
KEY=$(gpgv --keyring ${LOCAL_APT}/etc/trusted.gpg *.dsc 2>&1 | grep "key ID" | sed 's/.*key ID //' || true)
[ -z "$KEY" ] && KEY=$(gpgv --keyring ${LOCAL_APT}/etc/trusted.gpg *.dsc 2>&1 | egrep ".SA key" | sed 's/.*.SA key //' || true) [ -z "$KEY" ] && KEY=$(gpgv --keyring ${LOCAL_APT}/etc/trusted.gpg *.dsc 2>&1 | egrep ".SA key" | sed 's/.*.SA key //' || true)
apt-key --keyring ${LOCAL_APT}/etc/trusted.gpg adv --recv-keys --keyserver hkps://keyserver.ubuntu.com:443 $KEY > /dev/null apt-key --keyring ${LOCAL_APT}/etc/trusted.gpg adv --recv-keys --keyserver hkps://keyserver.ubuntu.com:443 $KEY > /dev/null
gpgv --keyring ${LOCAL_APT}/etc/trusted.gpg *.dsc touch ${LOCAL_APT}/keyring.gpg
else gpg2 --keyring ${LOCAL_APT}/keyring.gpg --import ${LOCAL_APT}/etc/trusted.gpg
gpg2 --verify --keyring ${LOCAL_APT}/etc/trusted.gpg *.dsc
else
echo WARNING! The dsc file is not gpg signed! echo WARNING! The dsc file is not gpg signed!
[ -z "$EXTERNAL" ] && exit 1 [ -z "$EXTERNAL" ] && exit 1
fi
fi fi
dpkg-source --no-check -x --skip-patches *.dsc source dpkg-source --no-check -x --skip-patches *.dsc source