commit:     44b9559cf88eaf722d480653eb9f9f7c05668de6
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Wed Jan 21 08:17:02 2026 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Wed Jan 21 08:17:23 2026 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=44b9559c

media-libs/freetype: wire up verify-sig

Signed-off-by: Sam James <sam <AT> gentoo.org>

 media-libs/freetype/Manifest                  |  3 +++
 media-libs/freetype/freetype-2.14.1-r1.ebuild | 27 ++++++++++++++++++++++--
 media-libs/freetype/freetype-9999.ebuild      | 30 ++++++++++++++++++++++-----
 3 files changed, 53 insertions(+), 7 deletions(-)

diff --git a/media-libs/freetype/Manifest b/media-libs/freetype/Manifest
index 55f034ea9415..8281b161589e 100644
--- a/media-libs/freetype/Manifest
+++ b/media-libs/freetype/Manifest
@@ -1,3 +1,6 @@
 DIST freetype-2.14.1.tar.xz 2664948 BLAKE2B 
1dc62d337a93ca94f93496e60bdf9cbabed5867d66bb2f07669f1b5f81ef16f6cc57c401f51bb62d919680316f73902fafb6a167c45183872faaf984840b5ec7
 SHA512 
28284da99be52e90c7883fd668131cd44227ce68b98a57767fc33b2fe73e4baa5425cba4144bf3094192946d2abec03cec7afefe6300c0cda6787fae91966bad
+DIST freetype-2.14.1.tar.xz.sig 833 BLAKE2B 
9a75da5d2f98d7a72c633c1264ec3bc30a549496033baa2b702f3ab192332d17bf37f554bb2554b399f3a63e4fea203e1f6c200869a882ab45b45c8d3cc3a447
 SHA512 
56dffecdd8388af8b5db893d8b727f8784e0aab79e2b05ee28732026fec4396c5539e6759d70a49aa993caa02335d4889655cfb325262bd1674212fff7e080b5
 DIST freetype-doc-2.14.1.tar.xz 2175972 BLAKE2B 
1065f27c6243c0ff546c091ba4267342304c78615feb700d105136930e3d9cebbae2e784df12a13ca13f9db1b82a079405b665141102f2b96d4c673b76fe45f3
 SHA512 
a2e0901863d59c59ff4d1ded1c2000ddaa5cf21c3ea5fdf74e8bfecee56f8cf954628d0abd7440e9c1a3ebe23801138737e297809f403574304c41231f0fb962
+DIST freetype-doc-2.14.1.tar.xz.sig 833 BLAKE2B 
b3071961f16cda1525dece3d88636be3af329d36151d48443d553492582a05d0fdd8a09f67bda863a40c44b65208f76f7663b1820af5760dfcf902e7a3bff37c
 SHA512 
15ad91d610b19823a1a379f86632a0d42764a49082aaef0eee15fa9e2df70e26b8c48e2f812eadda54ef2b5b3a4f795a979c1534ced7d6b29974335d14daab98
 DIST ft2demos-2.14.1.tar.xz 344228 BLAKE2B 
d91ccdf470a6a14e4d0f6f7a8aa9d22cdaaf88bd44dfc09b65efc90becd87b59c4c9bbc62c63154f207900d0d957bc9dd4674b2228fb9ca0b55b273004ac3f74
 SHA512 
a6240e888807c6171f8ee5d14578f83902cb495e6e911e5fd7c17628025310a60b0dfe5cd6c6e8803d3460eacd534d7f21c6c598081934d609575e182a312877
+DIST ft2demos-2.14.1.tar.xz.sig 833 BLAKE2B 
4bf9a85ea16ddd9c619d2537abc8b38dd0939422c3f66c932695ce739c0bf158ba6851dd708c4986ee3fda42ad05a73c033c0158c577f59eebdb091fd36279c7
 SHA512 
86ba1530f510fcf9c088f598d5c038b537844dfa5faa5a8b69ece497b1ced61bd56af566b2563f63c74af56229db9e1357b924697b8a6cf77a5f88e5f98912f4

diff --git a/media-libs/freetype/freetype-2.14.1-r1.ebuild 
b/media-libs/freetype/freetype-2.14.1-r1.ebuild
index 165865ced58e..5519bc9a01c9 100644
--- a/media-libs/freetype/freetype-2.14.1-r1.ebuild
+++ b/media-libs/freetype/freetype-2.14.1-r1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2025 Gentoo Authors
+# Copyright 1999-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -11,19 +11,35 @@ HOMEPAGE="https://www.freetype.org/";
 if [[ ${PV} == 9999 ]] ; then
        inherit git-r3
 else
+       VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/wernerlemberg.asc
+       inherit verify-sig
        SRC_URI="
                https://downloads.sourceforge.net/freetype/${P/_/}.tar.xz
                mirror://nongnu/freetype/${P/_/}.tar.xz
                utils? (
                        
https://downloads.sourceforge.net/freetype/ft2demos-${PV}.tar.xz
                        mirror://nongnu/freetype/ft2demos-${PV}.tar.xz
+                       verify-sig? (
+                               
https://downloads.sourceforge.net/freetype/ft2demos-${PV}.tar.xz.sig
+                               
mirror://nongnu/freetype/ft2demos-${PV}.tar.xz.sig
+                       )
                )
                doc? (
                        
https://downloads.sourceforge.net/freetype/${PN}-doc-${PV}.tar.xz
                        mirror://nongnu/freetype/${PN}-doc-${PV}.tar.xz
+                       verify-sig? (
+                               
https://downloads.sourceforge.net/freetype/${PN}-doc-${PV}.tar.xz.sig
+                               
mirror://nongnu/freetype/${PN}-doc-${PV}.tar.xz.sig
+                       )
+               )
+               verify-sig? (
+                       
https://downloads.sourceforge.net/freetype/${P/_/}.tar.xz.sig
+                       mirror://nongnu/freetype/${P/_/}.tar.xz.sig
                )
        "
        KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 
~riscv ~s390 ~sparc x86 ~arm64-macos ~x64-macos ~x64-solaris"
+
+       BDEPEND="verify-sig? ( sec-keys/openpgp-keys-wernerlemberg )"
 fi
 
 LICENSE="|| ( FTL GPL-2+ )"
@@ -41,7 +57,7 @@ RDEPEND="
        )
 "
 DEPEND="${RDEPEND}"
-BDEPEND="
+BDEPEND+="
        virtual/pkgconfig
 "
 PDEPEND="harfbuzz? ( >=media-libs/harfbuzz-1.3.0[truetype,${MULTILIB_USEDEP}] 
)"
@@ -73,6 +89,13 @@ _egit_repo_handler() {
                fi
        else
                default
+
+               if use verify-sig; then
+                       verify-sig_verify_detached 
"${DISTDIR}"/${P}.tar.xz{,.sig}
+
+                       use doc && verify-sig_verify_detached 
"${DISTDIR}"/${PN}-doc-${PV}.tar.xz{,.sig}
+                       use utils && verify-sig_verify_detached 
"${DISTDIR}"/ft2demos-${PV}.tar.xz{,.sig}
+               fi
        fi
 }
 

diff --git a/media-libs/freetype/freetype-9999.ebuild 
b/media-libs/freetype/freetype-9999.ebuild
index e9bc1d58ec30..74c6907116eb 100644
--- a/media-libs/freetype/freetype-9999.ebuild
+++ b/media-libs/freetype/freetype-9999.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2025 Gentoo Authors
+# Copyright 1999-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -11,19 +11,35 @@ HOMEPAGE="https://www.freetype.org/";
 if [[ ${PV} == 9999 ]] ; then
        inherit git-r3
 else
+       VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/wernerlemberg.asc
+       inherit verify-sig
        SRC_URI="
                https://downloads.sourceforge.net/freetype/${P/_/}.tar.xz
                mirror://nongnu/freetype/${P/_/}.tar.xz
                utils? (
                        
https://downloads.sourceforge.net/freetype/ft2demos-${PV}.tar.xz
                        mirror://nongnu/freetype/ft2demos-${PV}.tar.xz
+                       verify-sig? (
+                               
https://downloads.sourceforge.net/freetype/ft2demos-${PV}.tar.xz.sig
+                               
mirror://nongnu/freetype/ft2demos-${PV}.tar.xz.sig
+                       )
                )
                doc? (
                        
https://downloads.sourceforge.net/freetype/${PN}-doc-${PV}.tar.xz
                        mirror://nongnu/freetype/${PN}-doc-${PV}.tar.xz
+                       verify-sig? (
+                               
https://downloads.sourceforge.net/freetype/${PN}-doc-${PV}.tar.xz.sig
+                               
mirror://nongnu/freetype/${PN}-doc-${PV}.tar.xz.sig
+                       )
+               )
+               verify-sig? (
+                       
https://downloads.sourceforge.net/freetype/${P/_/}.tar.xz.sig
+                       mirror://nongnu/freetype/${P/_/}.tar.xz.sig
                )
        "
        KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc 
~ppc64 ~riscv ~s390 ~sparc ~x86 ~arm64-macos ~x64-macos ~x64-solaris"
+
+       BDEPEND="verify-sig? ( sec-keys/openpgp-keys-wernerlemberg )"
 fi
 
 LICENSE="|| ( FTL GPL-2+ )"
@@ -41,14 +57,11 @@ RDEPEND="
        )
 "
 DEPEND="${RDEPEND}"
-BDEPEND="
+BDEPEND+="
        virtual/pkgconfig
 "
 PDEPEND="harfbuzz? ( >=media-libs/harfbuzz-1.3.0[truetype,${MULTILIB_USEDEP}] 
)"
 
-PATCHES=(
-)
-
 _egit_repo_handler() {
        if [[ ${PV} == 9999 ]] ; then
                local phase="${1}"
@@ -71,6 +84,13 @@ _egit_repo_handler() {
                fi
        else
                default
+
+               if use verify-sig; then
+                       verify-sig_verify_detached 
"${DISTDIR}"/${P}.tar.xz{,.sig}
+
+                       use doc && verify-sig_verify_detached 
"${DISTDIR}"/${PN}-doc-${PV}.tar.xz{,.sig}
+                       use utils && verify-sig_verify_detached 
"${DISTDIR}"/ft2demos-${PV}.tar.xz{,.sig}
+               fi
        fi
 }
 

Reply via email to