From 2f0f2228c6e2709ce6461e72e349d3febc2cd574 Mon Sep 17 00:00:00 2001 From: Sam James Date: Wed, 17 Jun 2026 07:07:03 +0100 Subject: [PATCH] sec-keys/openpgp-keys-openssl: add 20260617 Port to sec-keys.eclass and add the new key from https://github.com/openssl/openssl/pull/31353. It is also listed on https://openssl-library.org/source/. Closes: https://bugs.gentoo.org/977506 Signed-off-by: Sam James --- sec-keys/openpgp-keys-openssl/Manifest | 8 +++ .../openpgp-keys-openssl-20260617.ebuild | 61 +++++++++++++++++++ 2 files changed, 69 insertions(+) create mode 100644 sec-keys/openpgp-keys-openssl/openpgp-keys-openssl-20260617.ebuild diff --git a/sec-keys/openpgp-keys-openssl/Manifest b/sec-keys/openpgp-keys-openssl/Manifest index bd9b49a3987c7..cec164a194fdd 100644 --- a/sec-keys/openpgp-keys-openssl/Manifest +++ b/sec-keys/openpgp-keys-openssl/Manifest @@ -1,3 +1,11 @@ +DIST openpgp-keys-hlandau-openpgp-20260617.asc 18589 BLAKE2B c8c3f214556a7df103632c36a838c9ce1d2aef587b8861f4ece13d808278b40afa3620e8b61c34e1987986f2015c1d6b69454e09d1223d9b1b04cb4edfaf54c4 SHA512 1ba2f37d4c37c3f7adc3a95059686403741a8685c2de8e18b2a2ffacfa930274a0dea5fc8da9a4b6d307c1d8421052f1a6f6831e1bec19bafb970720dac3810d +DIST openpgp-keys-kurt-openpgp-20260617.asc 9533 BLAKE2B 93a34c766e179dcf7692bae9b3f522f04e5480b5222a2277ddc858de8775a3343c4faede0c380fa6e0084c59b553a6001c2c8b7133d827621b55454e376ffc29 SHA512 979852e4e63dd0f41eee4ac8261fd27c521a52661c113e8117aca3197295d4e64caa9913a401a28e3aef85acf929bb2c38f0c27443257187852d18df0317f6f8 +DIST openpgp-keys-matt-ubuntu-20260617.asc 35735 BLAKE2B 3f7e769a342d71769000f13253f92f56ed9f8389db1b9d317a81383079c38d7ceec1e914d4c1a9039154f2ce485d70df1f0736944e5d13ac936eea473bcff553 SHA512 d7a5fe013d9bcb31775de04ae8b8bbfb4adb05c40a4cfcabeca6adaaa0d1b7f65e621e87e5826945b6a81c3d29aa770877092e2a309aff31d0ad8e16b08cac4b +DIST openpgp-keys-openssl-20260617-pubkeys.asc 45049 BLAKE2B 0322f93b34ac33f455d1ef5e96a6fd52fd7e6519be66d1eb02e8bbe7c2aa83bd7ae8070c6264cb61fc310dcf44f24b0e984ccf342d85b9a92e0285fbf820a9f6 SHA512 5ad04000a903c744800b68ff5b784339cbea7095cde46629d6a0a0242f3610d4239414076fefa186cb644e633c2816272f5ff7eeb90da35397a2a0e8abc4c064 +DIST openpgp-keys-opensslold-openpgp-20260617.asc 3372 BLAKE2B efd8b84cb1cc33aa761b8c7484399bb3414ef60f16838c59c0ed3a8f3e9d5e40d918beaafc7dd39fbc77a4e3f8e12b88688dcacb1cb9ec6973ca01ab143c0dbc SHA512 016f174b9443473ebfb09e8c1f9e2c9ba8fc05498fe64f36c14f72f092d41bb9c7ca4a32ef32ad6b756b0dff84c738bb1b06d18d53cdff7eacc4ae71618e2006 +DIST openpgp-keys-pauli-openpgp-20260617.asc 2309 BLAKE2B 8352fc7ccd616055d5ac659be371fd7ddfd70ee86e90b980a24c7e7d6477ff43c0db6afd13c1ebd8960bcc5f5e99675c34195d2bab26255d134fd917653dc5f1 SHA512 3baa24c8bd4c0cfa387326dc58ceea6773c91353261e6972f4558ed5859994ae2792023797716d35e237a9c2da5696c629349e42c3312c9fe7a98ab8eb633de6 +DIST openpgp-keys-tjh-openpgp-20260617.asc 3225 BLAKE2B 184998a1c98dda0fb952bdec587d04f655f94d63cc9c325e8302a718d51009f83cb62d936c40d7d865e342dc5bb0ad19521b9a4132dcb8cbaaaa69f3a6a631ec SHA512 d38461e0ccc3b394102755dd645468325a9cc168be23fa145fa0cd71848cecf962252057c4765452b7e784627325760a8b0e557f9aac46b4d232bfec1f963515 +DIST openpgp-keys-tomas-openpgp-20260617.asc 8216 BLAKE2B 2e75d5cab35a13667a5e2f3f8590d5c9d6be75f96dd82b4b157aa4e41ede92db0c252b9c6d94dd5ec306f45e5aad6d6442f8d556e990fbf4ebed077318b8d7ae SHA512 2d85da5677a515cb069222e46d804914d111973b9b3db49d1eb6727d813bc0d8be926c1561b98c9ed10174afdc102d2f3bc0540522d48a332bb274bcf0edbddb DIST openssl-20220316-7953AC1FBC3DC8B3B292393ED5E9E43F7DF9EE8C.asc 45632 BLAKE2B 31595337315ac852dc837f690743149e5e66956b938165c56d8bd624c6e5797f6f1f927ee44bc6139b243945b837af494642176e33c1697348319ce923576c42 SHA512 c00b300370dbce3a75fefe1cbfae1938276478c836f39c115c51b72a5dd8b8e01d0f3a62b48da54caa238e532cfe83e1f8a0be2466b2926cf2f362c0e4a60bda DIST openssl-20220316-8657ABB260F056B1E5190839D9C4D26D0E604491.asc 29252 BLAKE2B f256f7c9f3d84293f461f3dd9f5156dfaf134a376ff7fa06d9988e7923e0a1a0e2cb6344cb978c590870963fabea3d7dea7eeb740b785049700275a9c975f213 SHA512 c62f3463f12b213db21945d8c8846a9823fa91b45f954c5248bc3c35b5c9ab31424cedb73e56065001d3f9ab6409e1926fa3ffaab3484bb8dfe126607d450e9c DIST openssl-keys-20221101-5B2545DAB21995F4088CEFAA36CEE4DEB00CFE33.asc 3050 BLAKE2B 5c785d9ed3019865fac34a0b7647ddadda30ceaed57a711c32483a1309b2160209a50b89bc9a01a1696b691999e27808ef2a44e94242478e388d963b8a2c13b4 SHA512 583a32254ea46b89e348ad14f22a784920b6ca3c75b9bd681298be94e5d367a6beedf4b320212ddd5509881e1bc88a643680c9ff2829d7a529d3f27956e2e086 diff --git a/sec-keys/openpgp-keys-openssl/openpgp-keys-openssl-20260617.ebuild b/sec-keys/openpgp-keys-openssl/openpgp-keys-openssl-20260617.ebuild new file mode 100644 index 0000000000000..d44745caeb32c --- /dev/null +++ b/sec-keys/openpgp-keys-openssl/openpgp-keys-openssl-20260617.ebuild @@ -0,0 +1,61 @@ +# Copyright 1999-2026 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +OSSL_FINGERPRINTS=( + # OpenSSL + # See https://openssl-library.org/source/ + B146647E45A7B33947AB226B2A2C87D161692D40:openssl:manual + + # OpenSSL + # See https://openssl-library.org/source/ + BA5473A2B0587B07FB27CF2D216094DFD0CB81EF:opensslold:manual,openpgp +) + +# We keep older keys here for now to allow verifying older & newer +# releases with the same keyring package. We'll drop them eventually. +# +# https://github.com/openssl/openssl/issues/19566 +# https://github.com/openssl/openssl/issues/19567 +OSSL_OLD_FINGERPRINTS=( + # Matt Caswell + 5B2545DAB21995F4088CEFAA36CEE4DEB00CFE33:matt:ubuntu + + # Paul Dale + 8657ABB260F056B1E5190839D9C4D26D0E604491:pauli:openpgp + + # Tim Hudson + B7C1C14360F353A36862E4D5231C84CDDCC69C45:tjh:openpgp + + # Hugo Landau + 95A9908DDFA16830BE9FB9003D30A3A9FF1360DC:hlandau:openpgp + + # Tomas Mraz + A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C:tomas:openpgp + + # Kurt Roeckx + E5E52560DD91C556DDBDA5D02064C53641C25E5D:kurt:openpgp + + # OpenSSL OMC (see https://github.com/openssl/openssl/commit/f925bfebbb287321133b9251e72bee869a0f58b4) + EFC0A467D613CB83C7ED6D30D894E2CE8B3D79F5:omc:manual +) + +SEC_KEYS_VALIDPGPKEYS=( + "${OSSL_FINGERPRINTS[@]}" + "${OSSL_OLD_FINGERPRINTS[@]}" +) + +inherit sec-keys + +DESCRIPTION="OpenPGP keys used by OpenSSL" +HOMEPAGE="https://www.openssl.org/" +SRC_URI+=" https://openssl-library.org/source/pubkeys.asc -> ${P}-pubkeys.asc" +ossl_key= +for ossl_key in "${OSSL_OLD_FINGERPRINTS[@]}" ; do + SRC_URI+=" https://dev.gentoo.org/~sam/distfiles/${CATEGORY}/${PN}/openssl-keys-20240424-${ossl_key%%:*}.asc" +done +unset ossl_key + +SLOT="0" +KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86"