commit: 790360c74a6e6d603883302e2f8f1881e88f26de Author: Sam James <sam <AT> gentoo <DOT> org> AuthorDate: Mon Jan 19 00:51:08 2026 +0000 Commit: Sam James <sam <AT> gentoo <DOT> org> CommitDate: Mon Jan 19 00:51:45 2026 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=790360c7
net-vpn/openvpn: wire up verify-sig Bug: https://bugs.gentoo.org/622432 Signed-off-by: Sam James <sam <AT> gentoo.org> net-vpn/openvpn/Manifest | 1 + net-vpn/openvpn/openvpn-2.6.17-r1.ebuild | 10 +++++++++- net-vpn/openvpn/openvpn-9999.ebuild | 10 +++++++++- 3 files changed, 19 insertions(+), 2 deletions(-) diff --git a/net-vpn/openvpn/Manifest b/net-vpn/openvpn/Manifest index ab7d38b99579..db477ca4c70b 100644 --- a/net-vpn/openvpn/Manifest +++ b/net-vpn/openvpn/Manifest @@ -1,3 +1,4 @@ DIST openvpn-2.6.12.tar.gz 1912400 BLAKE2B 5e40c61cb4aea3db27eff8ae7f49dafaa6e47c8a19fee5fa8802956fc976be490e9b558397741bc2e4447129f174176f9fbbfce16478d96b27a39ecb08a9da86 SHA512 92f548186d9375d6ae47b1387dd191241b8a45aed82294523b3771bdd5e699b94265e1a3bbf3ef2638da0d54c19c783f54c456cbd755c846849bf67913cad6db DIST openvpn-2.6.14.tar.gz 1926343 BLAKE2B 15376d0a1600abfbf8541614282c622bbc09bf4402730a20eb6606bf1debdda0836e069fd45068bda1d71deb72df052c68425771693592d3c72d680a16c87d6d SHA512 c94b45ef5b455a15d7841e6bf5e5f441906d641f699ac84c5987b2fc9f1159f38fc5a5af4b22c0f531ce424b18301cfdf08bb496afd1bdbca78e37238bd28fbc DIST openvpn-2.6.17.tar.gz 1934219 BLAKE2B a5cff9bf4de85b647bd0cef808586b2cd29694ad0134ae6e4b3f74251c2ce0908cf86cbc041768f7fbc495e3ad5c5dbb9c491fe351b99da330dd2390142b353e SHA512 c76e9dd6305b04143e382870a110b5781e8ef934e10d01c13a3b49eecacbe37fd19ca178056fd50848c2c6b07dd8ec27123bb8b3d1c0bab8e1dc85b563a579e0 +DIST openvpn-2.6.17.tar.gz.asc 833 BLAKE2B d0a90c3266b7eb1643b63905bab571ecbfba156772f94c3495139dc969f4b5038ae8719ab41e8608a5f8bfa77e728a963e9f4ac05aa0317b9fe4623da70bfebe SHA512 f0844b5b5471ff01a4d84e95ed189d8c86187c157d88f6c7396a844bdf0dbd020895dfae0cd881e004b535ec37cdeb73e1539c0e54b1bb561651dffb45c6f859 diff --git a/net-vpn/openvpn/openvpn-2.6.17-r1.ebuild b/net-vpn/openvpn/openvpn-2.6.17-r1.ebuild index 869613129f5c..2542fea47191 100644 --- a/net-vpn/openvpn/openvpn-2.6.17-r1.ebuild +++ b/net-vpn/openvpn/openvpn-2.6.17-r1.ebuild @@ -12,7 +12,13 @@ if [[ ${PV} == "9999" ]]; then EGIT_REPO_URI="https://github.com/OpenVPN/${PN}.git"; inherit git-r3 else - SRC_URI="https://build.openvpn.net/downloads/releases/${P}.tar.gz"; + VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/openvpn.asc + inherit verify-sig + + SRC_URI=" + https://build.openvpn.net/downloads/releases/${P}.tar.gz + verify-sig? ( https://build.openvpn.net/downloads/releases/${P}.tar.gz.asc ) + " KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~mips ppc ppc64 ~riscv ~sparc x86" fi @@ -63,6 +69,8 @@ RDEPEND=" if [[ ${PV} = "9999" ]]; then BDEPEND+=" dev-python/docutils" +else + BDEPEND+=" verify-sig? ( sec-keys/openpgp-keys-openvpn )" fi PATCHES=( diff --git a/net-vpn/openvpn/openvpn-9999.ebuild b/net-vpn/openvpn/openvpn-9999.ebuild index 6b8fa5d32838..002b9f0b6bf7 100644 --- a/net-vpn/openvpn/openvpn-9999.ebuild +++ b/net-vpn/openvpn/openvpn-9999.ebuild @@ -12,7 +12,13 @@ if [[ ${PV} == "9999" ]]; then EGIT_REPO_URI="https://github.com/OpenVPN/${PN}.git"; inherit git-r3 else - SRC_URI="https://build.openvpn.net/downloads/releases/${P}.tar.gz"; + VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/openvpn.asc + inherit verify-sig + + SRC_URI=" + https://build.openvpn.net/downloads/releases/${P}.tar.gz + verify-sig? ( https://build.openvpn.net/downloads/releases/${P}.tar.gz.asc ) + " KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~mips ~ppc ~ppc64 ~riscv ~sparc ~x86" fi @@ -63,6 +69,8 @@ RDEPEND=" if [[ ${PV} = "9999" ]]; then BDEPEND+=" dev-python/docutils" +else + BDEPEND+=" verify-sig? ( sec-keys/openpgp-keys-openvpn )" fi PATCHES=(
