From bed170aa14b3d62d841e215dc059e389f7c45af5119d49bfc69e1e96f1f3aba9 Mon Sep 17 00:00:00 2001 From: Stanislav Brabec Date: Mon, 3 Dec 2012 13:23:52 +0000 Subject: [PATCH] Accepting request 143877 from home:sbrabec:gpg-offline-verify Verify GPG signature: Perform build-time offline GPG verification. Please verify that included keyring matches your needs. For manipulation with the offline keyring, please use gpg-offline tool from openSUSE:Factory, devel-tools-building or Base:System. See the man page and/or /usr/share/doc/packages/gpg-offline/PACKAGING.HOWTO. If you need to build your package for older products and don't want to mess spec file with ifs, please follow PACKAGING.HOWTO: you can link or aggregate gpg-offline from devel:tools:building or use following trick with "osc meta prjconf": --- Cut here ---- %if 0%{?suse_version} <= 1220 Substitute: gpg-offline %endif Macros: %gpg_verify(dnf) \ %if 0%{?suse_version} > 1220\ echo "WARNING: Using %%gpg_verify macro from prjconf, not from gpg-offline package."\ gpg-offline --directory="%{-d:%{-d*}}%{!-d:%{_sourcedir}}" --package="%{-n:%{-n*}}%{!-n:%{name}}""%{-f: %{-f*}}" --verify %{**}\ %else\ echo "WARNING: Dummy prjconf macro. gpg-offline is not available, skipping %{**} GPG signature verification!"\ %endif\ %nil ----------------- OBS-URL: https://build.opensuse.org/request/show/143877 OBS-URL: https://build.opensuse.org/package/show/hardware/nut?expand=0&rev=37 --- nut-2.6.5.tar.gz.sig | Bin 0 -> 72 bytes nut.changes | 5 +++++ nut.keyring | 48 +++++++++++++++++++++++++++++++++++++++++++ nut.spec | 4 ++++ 4 files changed, 57 insertions(+) create mode 100644 nut-2.6.5.tar.gz.sig create mode 100644 nut.keyring diff --git a/nut-2.6.5.tar.gz.sig b/nut-2.6.5.tar.gz.sig new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..50f22da6146050a796d28104d622895f07f00e78a15e0f7203c07eed974b3c53 GIT binary patch literal 72 zcmV-O0Jr~$Mg#y60ssaD0#G8%1po>O5Zh!F${s&pL}ExQ%(UqmNDmlg*qGm eWRRMyu>hdHmAc;ym)=0pyA;6m#{7C8JtXBc?Hr>3 literal 0 HcmV?d00001 diff --git a/nut.changes b/nut.changes index 966963a..3d4645d 100644 --- a/nut.changes +++ b/nut.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Mon Nov 19 21:22:52 CET 2012 - sbrabec@suse.cz + +- Verify GPG signature. + ------------------------------------------------------------------- Sat Nov 17 09:54:35 UTC 2012 - aj@suse.de diff --git a/nut.keyring b/nut.keyring new file mode 100644 index 0000000..5214045 --- /dev/null +++ b/nut.keyring @@ -0,0 +1,48 @@ +pub 1024D/204DDF1B 2002-07-15 +uid Arnaud Quette +uid Arnaud Quette +uid Arnaud Quette +uid Arnaud Quette +uid Arnaud Quette +uid Arnaud Quette +sub 1024g/D8B1B6B4 2002-07-15 + +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.19 (GNU/Linux) + +mQGiBD0y56QRBACYMNr6RbAfj3T7ZoAyUWjofb/n5HalrHo7utL8V5qpbF0U95dJ +5KNXMzkSe79qviz5O8Np4UJdyzjbb1JSKdSiH56a08E/siJkwJ3c9b4eWCHB7Rq3 +2nWWyeF2um/Sk9OqFPDp/3YPJIGxAYCNXMJWYDjVSRmyTkyt7q0cY+uZmwCgxxwv +r8LoVOXfRfSeG41wp/3tIeMD/iuUmvpr9yRWKDlbAuhLEFRhzzcmWFezIUN8a1fW +BmKxnbEcUkdOyrQMypXURWEnr2tYPOoGyq670xrwoWMCS7DhfQnUeFV0IANOvUZA +SOCY8EsiiD3r05LjGEudbnvP2Ol0G5G46IEC2gwNsQlvFZhf+lGG2obFGnIFTi2o +RhmxBACPemrbn3DoiPKwTpxoLsg5+s75InMDsPVe15TfxrDrXotsoT7rya5wjAIu +aCqPlwI/RLweii1EZLFuBS9T1VO4k3uFXn8Ud9RuqhZnL45Ghw5dDPNnB8zTgqBP +h9H1zNl+zPgN0DEZUTg9HZWfVFEfdEu/U6cr48tGk8gWefOB9rQiQXJuYXVkIFF1 +ZXR0ZSA8YXF1ZXR0ZUBkZWJpYW4ub3JnPohhBBMRAgAhAhsDBgsJCAcDAgMVAgMD +FgIBAh4BAheABQJGPMmfAhkBAAoJENtkFMogTd8bn18An2c/08D9uGribUlxWT8p +dOkQnHubAJ0aG1k6KKuU61GWfJCB2QsMJkJBmLQlQXJuYXVkIFF1ZXR0ZSA8YXF1 +ZXR0ZS5kZXZAZ21haWwuY29tPoheBBMRAgAeBQJDLqFpAhsDBgsJCAcDAgMVAgMD +FgIBAh4BAheAAAoJENtkFMogTd8b4CwAmwfNvW7CypwmT6EDNmZDqxZcQtBxAKCO +bSVfhTyNY0Otdh69B7T7cfFV2bQlQXJuYXVkIFF1ZXR0ZSA8YXJuYXVkLnF1ZXR0 +ZUBmcmVlLmZyPohfBBMRAgAXBQI9MuelBQsHCgMEAxUDAgMWAgECF4AAEgkQ22QU +yiBN3xsHZUdQRwABAVweAKCXt8Jwxss7+lS+f4K+VPlQoO+HogCgwtJKRgNvkv5D +1PdJhVf3CLZfaki0KEFybmF1ZCBRdWV0dGUgPGFybmF1ZC5xdWV0dGVAZGViaWFu +Lm9yZz6IZgQTEQIAHgUCP1ThlAIbAwYLCQgHAwIDFQIDAxYCAQIeAQIXgAASCRDb +ZBTKIE3fGwdlR1BHAAEBsGwAnj7Q9Afc+gvlA3q5mUHdr6cFNLIWAJ96AQM1uri8 +H3HAKgeHeEcpybF3DbQoQXJuYXVkIFF1ZXR0ZSA8YXJuYXVkLnF1ZXR0ZUBtZ2V1 +cHMuY29tPohfBBMRAgAXBQI9ND4vBQsHCgMEAxUDAgMWAgECF4AAEgkQ22QUyiBN +3xsHZUdQRwABAVxfAJ0WFHDXpKrMiYqMRqYC9sJy7v/WLgCbB1Z8qUAnNd4WZJmo +HUVMKTbJr420JkFybmF1ZCBRdWV0dGUgPEFybmF1ZFF1ZXR0ZUBFYXRvbi5jb20+ +iGAEExECACAFAkjSDDACGwMGCwkIBwMCBBUCCAMEFgIDAQIeAQIXgAAKCRDbZBTK +IE3fG5fkAJwM0cd1Y67AjSQvIVv+Gq/CWrWx4wCePOsnHiyMhYN7OlWNV9HRtVm7 +1Iq5AQ0EPTLnwhAEAKEe3dQVxVL/ekOXdYODJhNER4iJJD6mBlImCHHsFxY1OVLK +K9R2n06QdgcLHSBgsSanujED2OeFl7gYcwxoXEqVdDTUQrbGIXAyu3KV+aPZFETv +9L5FHWIglP2UDEIpfu1LfM+h+mwcDnKEBHxOgtrTbdypCzNd+PFxb/8c51n7AAMF +A/4h+KQER+lzk3vqtKDlod0hIVdgh1IkvlGwKw6MCgTQi3QDoq74DrICWLTl6Nqz +cfnLsfokDAxflfrtU8sasJy7ych9Iv0MFbYubs0pzywYr9sKOxJKTO9JVWrFvGCG +Cjo/ek73zKISZUHKgv7jungAv0er2pTsMdE66+eEFRhK9IhOBBgRAgAGBQI9MufC +ABIJENtkFMogTd8bB2VHUEcAAQG6NQCcDXQDPuv6+LysxTssJmCylZRLyaoAoMaI +YhUziTcacpO24e94Nt71AxEB +=4Dhx +-----END PGP PUBLIC KEY BLOCK----- diff --git a/nut.spec b/nut.spec index ee9859b..208cf40 100644 --- a/nut.spec +++ b/nut.spec @@ -21,6 +21,7 @@ BuildRequires: apache2-devel BuildRequires: avahi-devel BuildRequires: dbus-1-glib-devel BuildRequires: gd-devel +BuildRequires: gpg-offline BuildRequires: libneon-devel BuildRequires: libopenssl-devel BuildRequires: libtool @@ -55,6 +56,8 @@ Source2: README.SUSE Source3: upsd-early-powerdown.init Source5: nut.firewall.in Source7: nut.sleep +Source8: http://www.networkupstools.org/source/2.6/%{name}-%{version}.tar.gz.sig +Source9: %{name}.keyring Patch: nut-preconfig.patch # PATCH-FIX-OPENSUSE nut-hal.patch sbrabec@suse.cz -- Fix hal callouts path. Patch1: nut-hal.patch @@ -172,6 +175,7 @@ Detailed information about supported hardware can be found in /usr/share/doc/packages/nut. %prep +%gpg_verify %{S:8} %setup -q cp -a %{S:1} %{S:2} %{S:3} %{S:5} %{S:7} . mv upsd-early-powerdown.init upsd-early-powerdown