| 1 |
|
# Copyright 1999-2025 Gentoo Authors
|
|
1 |
# Copyright 1999-2026 Gentoo Authors
|
| 2 |
2 |
# Distributed under the terms of the GNU General Public License v2
|
| 3 |
3 |
|
| 4 |
4 |
EAPI=8
|
| 5 |
5 |
|
| 6 |
|
DESCRIPTION="OpenPGP keys used by OpenSSL"
|
| 7 |
|
HOMEPAGE="https://www.openssl.org/"
|
|
6 |
OSSL_FINGERPRINTS=(
|
|
7 |
# OpenSSL <openssl@openssl.org>
|
|
8 |
# See https://openssl-library.org/source/
|
|
9 |
B146647E45A7B33947AB226B2A2C87D161692D40:openssl:manual
|
|
10 |
|
|
11 |
# OpenSSL <openssl@openssl.org>
|
|
12 |
# See https://openssl-library.org/source/
|
|
13 |
BA5473A2B0587B07FB27CF2D216094DFD0CB81EF:opensslold:manual,openpgp
|
|
14 |
)
|
| 8 |
15 |
|
| 9 |
|
# See the following:
|
| 10 |
|
# - https://www.openssl.org/source/
|
| 11 |
|
# - https://www.openssl.org/community/otc.html
|
| 12 |
|
# - https://www.openssl.org/community/omc.html
|
| 13 |
|
# Mirrored from https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x8657ABB260F056B1E5190839D9C4D26D0E604491 etc (unstable results)
|
| 14 |
|
# ```
|
| 15 |
|
# mkdir /tmp/tmp-gpg
|
| 16 |
|
# gpg --no-default-keyring --homedir=/tmp/tmp-gpg --keyserver keyserver.ubuntu.com --recv-keys "${OSSL_FINGERPRINTS[@]}" || exit 1
|
| 17 |
|
#
|
| 18 |
|
# for key in "${OSSL_FINGERPRINTS[@]}" ; do
|
| 19 |
|
# gpg --no-default-keyring --homedir=/tmp/tmp-gpg --export "${key}" > openssl-keys-20221101-${key}.asc
|
| 20 |
|
# done
|
| 21 |
|
# ```
|
|
16 |
# We keep older keys here for now to allow verifying older & newer
|
|
17 |
# releases with the same keyring package. We'll drop them eventually.
|
| 22 |
18 |
#
|
| 23 |
19 |
# https://github.com/openssl/openssl/issues/19566
|
| 24 |
20 |
# https://github.com/openssl/openssl/issues/19567
|
| 25 |
|
|
| 26 |
|
OSSL_FINGERPRINTS=(
|
|
21 |
OSSL_OLD_FINGERPRINTS=(
|
| 27 |
22 |
# Matt Caswell <matt@openssl.org>
|
| 28 |
|
5B2545DAB21995F4088CEFAA36CEE4DEB00CFE33
|
|
23 |
5B2545DAB21995F4088CEFAA36CEE4DEB00CFE33:matt:ubuntu
|
| 29 |
24 |
|
| 30 |
25 |
# Paul Dale <pauli@openssl.org>
|
| 31 |
|
8657ABB260F056B1E5190839D9C4D26D0E604491
|
|
26 |
8657ABB260F056B1E5190839D9C4D26D0E604491:pauli:openpgp
|
| 32 |
27 |
|
| 33 |
28 |
# Tim Hudson <tjh@openssl.org>
|
| 34 |
|
B7C1C14360F353A36862E4D5231C84CDDCC69C45
|
|
29 |
B7C1C14360F353A36862E4D5231C84CDDCC69C45:tjh:openpgp
|
| 35 |
30 |
|
| 36 |
31 |
# Hugo Landau <hlandau@openssl.org>
|
| 37 |
|
95A9908DDFA16830BE9FB9003D30A3A9FF1360DC
|
|
32 |
95A9908DDFA16830BE9FB9003D30A3A9FF1360DC:hlandau:openpgp
|
| 38 |
33 |
|
| 39 |
34 |
# Tomas Mraz <tomas@openssl.org>
|
| 40 |
|
A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
|
| 41 |
|
|
| 42 |
|
# Richard Levitte <levitte@openssl.org>
|
| 43 |
|
7953AC1FBC3DC8B3B292393ED5E9E43F7DF9EE8C
|
|
35 |
A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C:tomas:openpgp
|
| 44 |
36 |
|
| 45 |
37 |
# Kurt Roeckx <kurt@openssl.org>
|
| 46 |
|
E5E52560DD91C556DDBDA5D02064C53641C25E5D
|
|
38 |
E5E52560DD91C556DDBDA5D02064C53641C25E5D:kurt:openpgp
|
| 47 |
39 |
|
| 48 |
40 |
# OpenSSL OMC (see https://github.com/openssl/openssl/commit/f925bfebbb287321133b9251e72bee869a0f58b4)
|
| 49 |
|
EFC0A467D613CB83C7ED6D30D894E2CE8B3D79F5
|
|
41 |
EFC0A467D613CB83C7ED6D30D894E2CE8B3D79F5:omc:manual
|
| 50 |
42 |
)
|
| 51 |
43 |
|
|
44 |
SEC_KEYS_VALIDPGPKEYS=(
|
|
45 |
"${OSSL_FINGERPRINTS[@]}"
|
|
46 |
"${OSSL_OLD_FINGERPRINTS[@]}"
|
|
47 |
)
|
|
48 |
|
|
49 |
inherit sec-keys
|
|
50 |
|
|
51 |
DESCRIPTION="OpenPGP keys used by OpenSSL"
|
|
52 |
HOMEPAGE="https://www.openssl.org/"
|
|
53 |
SRC_URI+=" https://openssl-library.org/source/pubkeys.asc -> ${P}-pubkeys.asc"
|
| 52 |
54 |
ossl_key=
|
| 53 |
|
for ossl_key in "${OSSL_FINGERPRINTS[@]}" ; do
|
| 54 |
|
SRC_URI+=" https://dev.gentoo.org/~sam/distfiles/${CATEGORY}/${PN}/openssl-keys-${PV}-${ossl_key}.asc"
|
|
55 |
for ossl_key in "${OSSL_OLD_FINGERPRINTS[@]}" ; do
|
|
56 |
SRC_URI+=" https://dev.gentoo.org/~sam/distfiles/${CATEGORY}/${PN}/openssl-keys-20240424-${ossl_key%%:*}.asc"
|
| 55 |
57 |
done
|
| 56 |
58 |
unset ossl_key
|
| 57 |
59 |
|
| 58 |
|
S="${WORKDIR}"
|
| 59 |
|
|
| 60 |
|
LICENSE="public-domain"
|
| 61 |
60 |
SLOT="0"
|
| 62 |
61 |
KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86"
|
| 63 |
62 |
|
| 64 |
63 |
src_install() {
|
| 65 |
|
local files=( ${A} )
|
| 66 |
|
insinto /usr/share/openpgp-keys
|
| 67 |
|
newins - openssl.org.asc < <(cat "${files[@]/#/${DISTDIR}/}" || die)
|
|
64 |
sec-keys_src_install
|
|
65 |
|
|
66 |
dosym openssl.asc /usr/share/openpgp-keys/openssl.org.asc
|
| 68 |
67 |
}
|
