commit: def2accb3780e56b038ddd79cca9e524a4f2b499 Author: Sam James <sam <AT> gentoo <DOT> org> AuthorDate: Mon Jan 19 02:48:51 2026 +0000 Commit: Sam James <sam <AT> gentoo <DOT> org> CommitDate: Mon Jan 19 02:48:55 2026 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=def2accb
net-irc/irssi: wire up verify-sig 24 years after https://irssi.org/2002/05/25/irssi.org-cracked-irssis-configure-backdoored-for-past-two-months/ :) Signed-off-by: Sam James <sam <AT> gentoo.org> net-irc/irssi/Manifest | 1 + net-irc/irssi/irssi-1.4.5-r2.ebuild | 13 +++++++++++-- net-irc/irssi/irssi-9999.ebuild | 15 ++++++++++++--- 3 files changed, 24 insertions(+), 5 deletions(-) diff --git a/net-irc/irssi/Manifest b/net-irc/irssi/Manifest index d02e285e59ab..ff8da361891f 100644 --- a/net-irc/irssi/Manifest +++ b/net-irc/irssi/Manifest @@ -1 +1,2 @@ DIST irssi-1.4.5.tar.xz 1215688 BLAKE2B 573d8552137cb09c152fe0d1f9196c966bc0afb23e8817fed7315a07d2fc36b3ffabf5e8384bb80a48aa24cf57e5d336f40e708a4c9ef6bad3ec8ce10125f196 SHA512 5d80107ad625feb6d2b3ac807f517c5cfeae58986d3fbfe53ea82f2dee70396f5092abdc6ef137c5651e4515e081591079b37f0e428f69990db493cfe14e4f36 +DIST irssi-1.4.5.tar.xz.asc 195 BLAKE2B 7865a15b6745902ece25c9151ce68d6a50c056dd41ab020003fa0f0fb0b499baac746e5d537db07fe4db12565555965c6770f9909d809cbbd497d997a0fc49dc SHA512 8a4df3fabdc3d96b409f2b96da752cc5c3e6912b593499bc4b55600c5a81df05a4d6b0547aae1e2e252b53f6aeae29a44a9cc27335eaa0c6cd8bb3b3ec8feacb diff --git a/net-irc/irssi/irssi-1.4.5-r2.ebuild b/net-irc/irssi/irssi-1.4.5-r2.ebuild index 1ff7f9d58f23..5de87707bf5e 100644 --- a/net-irc/irssi/irssi-1.4.5-r2.ebuild +++ b/net-irc/irssi/irssi-1.4.5-r2.ebuild @@ -16,8 +16,16 @@ else # Keep for _rc compability MY_P="${P/_/-}" - SRC_URI="https://github.com/${PN}/${PN}/releases/download/${PV/_/-}/${MY_P}.tar.xz"; + VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/irssi.asc + inherit verify-sig + + SRC_URI=" + https://github.com/${PN}/${PN}/releases/download/${PV/_/-}/${MY_P}.tar.xz + verify-sig? ( https://github.com/${PN}/${PN}/releases/download/${PV/_/-}/${MY_P}.tar.xz.asc ) + " KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~x64-macos ~x64-solaris" + + BDEPEND=" verify-sig? ( sec-keys/openpgp-keys-irssi )" fi LICENSE="GPL-2" @@ -38,7 +46,8 @@ RDEPEND=" ) " DEPEND="${RDEPEND}" -BDEPEND="dev-lang/perl +BDEPEND+=" + dev-lang/perl virtual/pkgconfig" RDEPEND+=" selinux? ( sec-policy/selinux-irc )" diff --git a/net-irc/irssi/irssi-9999.ebuild b/net-irc/irssi/irssi-9999.ebuild index 8ffc187060b9..6958199caca8 100644 --- a/net-irc/irssi/irssi-9999.ebuild +++ b/net-irc/irssi/irssi-9999.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2025 Gentoo Authors +# Copyright 1999-2026 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 EAPI=8 @@ -16,8 +16,16 @@ else # Keep for _rc compability MY_P="${P/_/-}" - SRC_URI="https://github.com/${PN}/${PN}/releases/download/${PV/_/-}/${MY_P}.tar.xz"; + VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/irssi.asc + inherit verify-sig + + SRC_URI=" + https://github.com/${PN}/${PN}/releases/download/${PV/_/-}/${MY_P}.tar.xz + verify-sig? ( https://github.com/${PN}/${PN}/releases/download/${PV/_/-}/${MY_P}.tar.xz.asc ) + " KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~x64-macos ~x64-solaris" + + BDEPEND=" verify-sig? ( sec-keys/openpgp-keys-irssi )" fi LICENSE="GPL-2" @@ -38,7 +46,8 @@ RDEPEND=" ) " DEPEND="${RDEPEND}" -BDEPEND="dev-lang/perl +BDEPEND+=" + dev-lang/perl virtual/pkgconfig" RDEPEND+=" selinux? ( sec-policy/selinux-irc )"
