diff --git a/nginx.changes b/nginx.changes index f25ede7..6b19e7d 100644 --- a/nginx.changes +++ b/nginx.changes @@ -1,9 +1,10 @@ ------------------------------------------------------------------- -Fri Aug 16 00:03:37 UTC 2024 - Илья Индиго +Fri Aug 16 02:21:19 UTC 2024 - Илья Индиго - Renamed nginx-1.6.1-default_config.patch to nginx-conf.patch. - Renamed nginx-1.2.4-perl_vendor_install.patch to nginx-perl.patch. - Used atosetup -p1 macro and replaced editor from perl to sed. +- Added %check section with gpg signature source_verification. - Updated to 1.27.1 * https://nginx.org/en/CHANGES * Fixed crash in ngx_http_mp4_module via specially crafted mp4 file (CVE-2024-7347). diff --git a/nginx.spec b/nginx.spec index 3d14c62..26bde17 100644 --- a/nginx.spec +++ b/nginx.spec @@ -48,6 +48,7 @@ Patch3: %{name}-conf.patch Patch4: %{name}-aio.patch BuildRequires: %{name}-macros BuildRequires: gcc-c++ +BuildRequires: gpg2 BuildRequires: libatomic-ops-devel BuildRequires: pkgconfig BuildRequires: sysuser-shadow @@ -148,6 +149,12 @@ copydocs() { popd } +%check +GPGTMP=`mktemp -d` +gpg --homedir $GPGTMP -q --no-default-keyring --keyring $GPGTMP/.gpg-keyring --trust-model always --import %{SOURCE2} +gpg --homedir $GPGTMP -q --no-default-keyring --keyring $GPGTMP/.gpg-keyring --trust-model always -q --verify -- %{SOURCE1} %{SOURCE0} +rm -r $GPGTMP + %pre -f %{name}.pre %service_add_pre %{name}.service