Marcus Meissner
be84b3b4d8
- extend the build@suse.de product key. (bsc#1014151) pub 2048R/39DB7C82 2013-01-31 [expires: 2020-12-06] uid SuSE Package Signing Key <build@suse.de> - use dumpsigs script from openSUSE to merge code - renamed security_at_suse_de.asc to security_at_suse_de_old.asc - security_at_suse_de.asc: new 4096 bit RSA key. pub 4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de> bnc#899509 - create suse-build-key.gpg during build. - Remove old keys from keyring. (fate#314767) Keys currently inside the RPM trusted keyring: - pub 2048R/39DB7C82 SuSE Package Signing Key <build@suse.de> - pub 2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de> - Various keys are moved to the documentation area (/usr/share/doc/packages/suse-build-key) - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key. if SUSE Linux Enterprise 11 packages need to be verified on a SUSE Linux Enterprise 12 system. - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs. - security_at_suse_de.asc: Use only for email encryption and verification purposes when contacting our security contact address security@suse.de OBS-URL: https://build.opensuse.org/request/show/518537 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=26
96 lines
2.9 KiB
RPMSpec
96 lines
2.9 KiB
RPMSpec
#
|
|
# spec file for package suse-build-key
|
|
#
|
|
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Name: suse-build-key
|
|
BuildRequires: gpg
|
|
Provides: build-key
|
|
Requires: gpg
|
|
AutoReqProv: off
|
|
Summary: The public gpg key for rpm package signature verification
|
|
License: GPL-2.0+
|
|
Group: System/Packages
|
|
Version: 12.0
|
|
Release: 0
|
|
|
|
# pub 2048R/39DB7C82 2013-01-31 SuSE Package Signing Key <build@suse.de>
|
|
# The main package signing key.
|
|
Source0: gpg-pubkey-39db7c82-5847eb1f.asc
|
|
|
|
# pub 2048R/50A3DD1C 2013-01-14 SuSE Package Signing Key (reserve key) <build@suse.de>
|
|
# Fallback key if main key gets lost.
|
|
Source1: gpg-pubkey-50a3dd1c-50f35137.asc
|
|
|
|
# pub 1024R/307E3D54 2006-03-21 SuSE Package Signing Key <build@suse.de>
|
|
# SLES 10 key.
|
|
Source2: gpg-pubkey-307e3d54-4be01a65.asc
|
|
|
|
# pub 1024D/B37B98A9 2005-05-11 SUSE PTF Signing Key <support@suse.com>
|
|
# SUSE supplied PTF (program temporary fixes) are signed by this key.
|
|
# supplied to be not imported by default
|
|
Source98: suse_ptf_key.asc
|
|
|
|
# pub 4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de>
|
|
# sub 4096R/0DE80E03 2014-10-02
|
|
# Only used for email communication
|
|
Source99: security_at_suse_de.asc
|
|
|
|
Source100: dumpsigs
|
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
BuildArch: noarch
|
|
%define keydir %{_prefix}/lib/rpm/gnupg/keys
|
|
PreReq: sh-utils gpg fileutils mktemp
|
|
|
|
%description
|
|
This package contains the gpg keys that are used to sign the
|
|
SUSE rpm packages. The keys installed here are not actually
|
|
used by anything. rpm/zypper use the keys in the rpm db instead.
|
|
|
|
|
|
|
|
%prep
|
|
%setup -qcT
|
|
|
|
%build
|
|
cp %SOURCE98 .
|
|
cp %SOURCE99 .
|
|
|
|
%install
|
|
rm -rf $RPM_BUILD_ROOT
|
|
mkdir -p $RPM_BUILD_ROOT%{keydir}
|
|
for i in %sources; do
|
|
case "$i" in
|
|
*/gpg-pubkey-*.asc)
|
|
install -m 644 "$i" $RPM_BUILD_ROOT%{keydir}
|
|
;;
|
|
esac
|
|
done
|
|
install -m 755 %{SOURCE100} $RPM_BUILD_ROOT/usr/lib/rpm/gnupg
|
|
|
|
%files
|
|
%defattr(644,root,root)
|
|
%doc security_at_suse_de.asc suse_ptf_key.asc
|
|
%attr(755,root,root) %dir %{_prefix}/lib/rpm/gnupg
|
|
%attr(755,root,root) %dir %{keydir}
|
|
%attr(755,root,root) %{_prefix}/lib/rpm/gnupg/dumpsigs
|
|
%{keydir}/gpg-pubkey-50a3dd1c-50f35137.asc
|
|
%{keydir}/gpg-pubkey-39db7c82-5847eb1f.asc
|
|
%{keydir}/gpg-pubkey-307e3d54-4be01a65.asc
|
|
|
|
%changelog
|