commit:     1801fdcfb090dfddb2569401f9b30ccc9cb96840
Author:     Marek Szuba <marecki <AT> gentoo <DOT> org>
AuthorDate: Wed Aug 24 13:31:40 2022 +0000
Commit:     Marek Szuba <marecki <AT> gentoo <DOT> org>
CommitDate: Wed Aug 24 14:29:50 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1801fdcf

app-crypt/yubikey-manager: update the SRC_URI comment again

Turns out using release tarballs from GitHub is okay after all, see
https://github.com/Yubico/yubikey-manager/issues/518 for details.

Signed-off-by: Marek Szuba <marecki <AT> gentoo.org>

 app-crypt/yubikey-manager/yubikey-manager-4.0.9.ebuild | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/app-crypt/yubikey-manager/yubikey-manager-4.0.9.ebuild 
b/app-crypt/yubikey-manager/yubikey-manager-4.0.9.ebuild
index 8d1ff491bab0..3189b72bb3b4 100644
--- a/app-crypt/yubikey-manager/yubikey-manager-4.0.9.ebuild
+++ b/app-crypt/yubikey-manager/yubikey-manager-4.0.9.ebuild
@@ -10,11 +10,10 @@ inherit distutils-r1
 
 DESCRIPTION="Python library and command line tool for configuring a YubiKey"
 HOMEPAGE="https://developers.yubico.com/yubikey-manager/";
-# Per https://github.com/Yubico/yubikey-manager/issues/217, Yubico is
-# the official source for tarballs, not Github.
-# Unfortunately in spite of having been mentioned on the Release Notes
-# page since mid-July, as of mid-August 2022 there is still no trace
-# of an official 4.0.9 tarball.
+# According to https://github.com/Yubico/yubikey-manager/issues/518 the release
+# tarballs on Yubico Web site and on GitHub should be identical, and at least
+# for recent releases the latter are signed as well. Only the automatically
+# generated "Source code (tar.gz)" tarballs should not be used.
 
SRC_URI="https://github.com/Yubico/yubikey-manager/releases/download/${PV}/${P}.tar.gz
 -> ${P}.gh.tar.gz"
 
 LICENSE="BSD-2"

Reply via email to