Use openpgp-verify-detached when app-portage/gemato-20.0 is installed.
This lets us test the new code paths on ~arch with minimal risk
of breakage on stable.

Signed-off-by: Michał Górny <[email protected]>
---
 eclass/verify-sig.eclass | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

This is roughly the same patch that I've sent before, except that now
it features a has_version condition to restrict the changes to ~arch
gemato version.

diff --git a/eclass/verify-sig.eclass b/eclass/verify-sig.eclass
index 91433bf53453..f67a3b10a0bf 100644
--- a/eclass/verify-sig.eclass
+++ b/eclass/verify-sig.eclass
@@ -144,9 +144,16 @@ verify-sig_verify_detached() {
                        # gpg can't handle very long TMPDIR
                        # https://bugs.gentoo.org/854492
                        local -x TMPDIR=/tmp
-                       gemato gpg-wrap -K "${key}" "${extra_args[@]}" -- \
-                               gpg --verify "${sig}" "${file}" ||
-                               die "PGP signature verification failed"
+                       if has_version -b ">=app-portage/gemato-20"; then
+                               gemato openpgp-verify-detached -K "${key}" \
+                                       "${extra_args[@]}" \
+                                       "${sig}" "${file}" ||
+                                       die "PGP signature verification failed"
+                       else
+                               gemato gpg-wrap -K "${key}" "${extra_args[@]}" 
-- \
+                                       gpg --verify "${sig}" "${file}" ||
+                                       die "PGP signature verification failed"
+                       fi
                        ;;
                signify)
                        signify -V -p "${key}" -m "${file}" -x "${sig}" ||
-- 
2.39.2


Reply via email to