"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "scripts/Dpkg/Source/Package.pm" between
dpkg_1.20.2.tar.xz and dpkg_1.20.3.tar.xz

About: dpkg is the Debian GNU/Linux package installation tool (handles .deb files).

Package.pm  (dpkg_1.20.2.tar.xz):Package.pm  (dpkg_1.20.3.tar.xz)
skipping to change at line 432 skipping to change at line 432
sub check_original_tarball_signature { sub check_original_tarball_signature {
my ($self, $dir, @asc) = @_; my ($self, $dir, @asc) = @_;
my $upstream_key = $self->get_upstream_signing_key($dir); my $upstream_key = $self->get_upstream_signing_key($dir);
if (not -e $upstream_key) { if (not -e $upstream_key) {
warning(g_('upstream tarball signatures but no upstream signing key')); warning(g_('upstream tarball signatures but no upstream signing key'));
return; return;
} }
my $keyring = File::Temp->new(UNLINK => 1, SUFFIX => '.gpg'); my $keyring = File::Temp->new(UNLINK => 1, SUFFIX => '.gpg');
Dpkg::OpenPGP::import_key($upstream_key, keyring => $keyring);
my %opts = ( my %opts = (
keyrings => [ $keyring ],
require_valid_signature => $self->{options}{require_valid_signature}, require_valid_signature => $self->{options}{require_valid_signature},
); );
Dpkg::OpenPGP::import_key($upstream_key,
%opts,
keyring => $keyring,
);
foreach my $asc (@asc) { foreach my $asc (@asc) {
$opts{datafile} = $asc =~ s/\.asc$//r; Dpkg::OpenPGP::verify_signature($asc,
Dpkg::OpenPGP::verify_signature($asc, %opts); %opts,
keyrings => [ $keyring ],
datafile => $asc =~ s/\.asc$//r,
);
} }
} }
=item $bool = $p->is_signed() =item $bool = $p->is_signed()
Returns 1 if the DSC files contains an embedded OpenPGP signature. Returns 1 if the DSC files contains an embedded OpenPGP signature.
Otherwise returns 0. Otherwise returns 0.
=cut =cut
 End of changes. 4 change blocks. 
5 lines changed or deleted 10 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)