[arch-commits] Commit in lastpass-cli/trunk (PKGBUILD globalsign-pins.patch)

[Massimiliano Torromeo]

    Date: Thursday, May 17, 2018 @ 07:27:02
  Author: mtorromeo
Revision: 323381

Applied patch to pin the correct certificate (Fixes FS#58625)

Added:
  lastpass-cli/trunk/globalsign-pins.patch
Modified:
  lastpass-cli/trunk/PKGBUILD

-----------------------+
 PKGBUILD              |   13 ++++++++++---
 globalsign-pins.patch |   27 +++++++++++++++++++++++++++
 2 files changed, 37 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2018-05-17 07:26:57 UTC (rev 323380)
+++ PKGBUILD	2018-05-17 07:27:02 UTC (rev 323381)
@@ -5,7 +5,7 @@
 
 pkgname=lastpass-cli
 pkgver=1.3.0
-pkgrel=1
+pkgrel=2
 pkgdesc="LastPass command line interface tool"
 arch=('x86_64')
 url="https://lastpass.com/"
@@ -14,9 +14,16 @@
 makedepends=('asciidoc' 'cmake' 'bash-completion')
 optdepends=('xclip: clipboard support'
             'pinentry: securely read passwords')
-source=("https://github.com/lastpass/lastpass-cli/archive/v$pkgver/$pkgname-$pkgver.tar.gz")
-sha256sums=('bbcfd673d668287e773eef44da65fbd2f292daa213a39528f31037c528dbcfe4')
+source=("https://github.com/lastpass/lastpass-cli/archive/v$pkgver/$pkgname-$pkgver.tar.gz"
+        "globalsign-pins.patch")
+sha256sums=('bbcfd673d668287e773eef44da65fbd2f292daa213a39528f31037c528dbcfe4'
+            'ec91763f548a53ee7bfac4c3d36fe6516baacde50a493d5748816caace3ef58e')
 
+prepare() {
+  cd "$srcdir"/$pkgname-$pkgver
+  patch -p1 -i "$srcdir"/globalsign-pins.patch
+}
+
 build() {
   cd "$srcdir"/$pkgname-$pkgver
   cmake . -DCMAKE_INSTALL_PREFIX="/usr"

Added: globalsign-pins.patch
===================================================================
--- globalsign-pins.patch	                        (rev 0)
+++ globalsign-pins.patch	2018-05-17 07:27:02 UTC (rev 323381)
@@ -0,0 +1,27 @@
+From b888411b042df9414d1d78d99332b672e65c4eb9 Mon Sep 17 00:00:00 2001
+From: Bob Copeland <copeland at lastpass.com>
+Date: Wed, 16 May 2018 16:07:58 -0400
+Subject: [PATCH] Revert "pins: remove GlobalSign R1/R3 pins"
+
+This reverts commit 46e2a0fb488f4ed7fd8cc3f1c5b64ca009abc5ba.
+---
+ pins.h | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/pins.h b/pins.h
+index e629b6f..7455574 100644
+--- a/pins.h
++++ b/pins.h
+@@ -5,8 +5,12 @@ const char *PK_PINS[] = {
+ 	"HXXQgxueCIU5TTLHob/bPbwcKOKw6DkfsTWYHbxbqTY=",
+ 	/* current lastpass.eu primary (AddTrust) */
+ 	"lCppFqbkrlJ3EcVFAkeip0+44VaoJUymbnOaEUk7tEU=",
++	/* future lastpass root CA (GlobalSign R1) */
++	"K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=",
+ 	/* future lastpass root CA (GlobalSign R2) */
+ 	"iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=",
++	/* future lastpass root CA (GlobalSign R3) */
++	"cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=",
+ 	/* future lastpass.com primary (leaf) */
+ 	"0hkr5YW/WE6Nq5hNTcApxpuaiwlwy5HUFiOt3Qd9VBc=",
+ 	/* future lastpass.com backup (leaf) */