summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorarved <arved@FreeBSD.org>2003-04-22 16:35:48 +0000
committerarved <arved@FreeBSD.org>2003-04-22 16:35:48 +0000
commitadd3ac4276c20263d1fe03b3f4a31e20729cd089 (patch)
treefbeae81195245202933c166857a6b52f49e17755
parenta9d179b52383d7d7b51507c11290f87fca1fca0a (diff)
downloadFreeBSD-ports-add3ac4276c20263d1fe03b3f4a31e20729cd089.zip
FreeBSD-ports-add3ac4276c20263d1fe03b3f4a31e20729cd089.tar.gz
Chase MD5 sum of tcl.o again [1]
If gpg is installed, verify gpg signatures, since bitchx.org recently had another problem with backdoored distfiles Reported by: "Erik Paulsen Skålerud" <erik@pentadon.com>[1]
-rw-r--r--irc/bitchx/Makefile24
-rw-r--r--irc/bitchx/distinfo4
2 files changed, 22 insertions, 6 deletions
diff --git a/irc/bitchx/Makefile b/irc/bitchx/Makefile
index 38b2c0e..64db74b 100644
--- a/irc/bitchx/Makefile
+++ b/irc/bitchx/Makefile
@@ -13,13 +13,13 @@ MASTER_SITES= ftp://ftp.bitchx.com/pub/BitchX/source/ \
ftp://ftp.bitchx.org/pub/BitchX/source/ \
ftp://ftp.cyberpunkz.org/pub/BitchX/source/ \
ftp://ftp.cyberpunkz.org/pub/BitchX/tcl-o/:tcl
-.if !defined(WITH_TCL)
-DISTNAME= ircii-pana-${PORTVERSION}
-.else
DISTFILES= ircii-pana-${PORTVERSION}${EXTRACT_SUFX} \
- freebsd4-tcl83-bx1.0c19-tcl.o:tcl
-EXTRACT_ONLY= ircii-pana-${PORTVERSION}${EXTRACT_SUFX}
+ ircii-pana-${PORTVERSION}${EXTRACT_SUFX}.sig
+.if defined(WITH_TCL)
+DISTFILES+= freebsd4-tcl83-bx1.0c19-tcl.o:tcl \
+ freebsd4-tcl83-bx1.0c19-tcl.o.sig:tcl
.endif
+EXTRACT_ONLY= ircii-pana-${PORTVERSION}${EXTRACT_SUFX}
MAINTAINER?= arved@FreeBSD.org
COMMENT?= "An alternative ircII color client with optional GTK/GNOME support"
@@ -104,6 +104,20 @@ CONFIGURE_ARGS+= --with-plugins=${PLUGINS}
.endif
CONFIGURE_ENV+= CFLAGS="${CFLAGS}"
+.if exists(${PREFIX}/bin/gpg)
+pre-extract:
+ @${ECHO_CMD} "===> Verifying GnuPG Signatures."
+ -gpg --keyserver pgp.mit.edu --recv-key 42D1F77C
+ cd ${DISTDIR}; gpg --verify ircii-pana-${PORTVERSION}${EXTRACT_SUFX}.sig \
+ ircii-pana-${PORTVERSION}${EXTRACT_SUFX}
+.if defined(WITH_TCL)
+ cd ${DISTDIR}; gpg --verify freebsd4-tcl83-bx1.0c19-tcl.o.sig \
+ freebsd4-tcl83-bx1.0c19-tcl.o
+.endif
+.else
+ @${ECHO_CMD} "===> GnuPG not installed. Signatures can not be verified"
+.endif
+
pre-patch:
.if defined(WITH_LATIN)
${REINPLACE_CMD} -e 's|#undef LATIN1|#define LATIN1|g' ${WRKSRC}/include/config.h
diff --git a/irc/bitchx/distinfo b/irc/bitchx/distinfo
index afe580f..be549b1 100644
--- a/irc/bitchx/distinfo
+++ b/irc/bitchx/distinfo
@@ -1,2 +1,4 @@
MD5 (ircii-pana-1.0c19.tar.gz) = 79431ff0880e7317049045981fac8adc
-MD5 (freebsd4-tcl83-bx1.0c19-tcl.o) = 3f5534de7a35287d5a4bb39e912d6e43
+MD5 (ircii-pana-1.0c19.tar.gz.sig) = fa1da55c026f721e25d399c26cb6f3cf
+MD5 (freebsd4-tcl83-bx1.0c19-tcl.o) = a49fd4cab976de64ea8b4215a50a9553
+MD5 (freebsd4-tcl83-bx1.0c19-tcl.o.sig) = e02a59d3eb4f3c9d50f0bf28312dd800
OpenPOWER on IntegriCloud