[arch-commits] Commit in radvd/trunk (PKGBUILD)

Thore Bödecker foxxx0 at archlinux.org
Sat Mar 6 14:27:26 UTC 2021


    Date: Saturday, March 6, 2021 @ 14:27:26
  Author: foxxx0
Revision: 884281

upgpkg: radvd 2.19-1

The upstream project has been handed over from reubenhwk to robbat2.
Unfortunately reubenhwk has lost his gpg key previously used for release signing and thus the "official" handover process is only documented here:

https://github.com/radvd-project/radvd/issues/129
https://github.com/radvd-project/radvd/issues/138

>From now on the releases will be signed by robbat2 with 7D0B3CEBE9B85B1F825BCECFEE05E6F6A48F6136.

While this handover process has been rather unfortunate, especially with respect to reubenhwk losing his gpg key, we have investigated the code changes and some of robbat2/s previous contributions to the radvd project and seem as confident as can be that there was no malicous intent and are now considering 7D0B3CEBE9B85B1F825BCECFEE05E6F6A48F6136 as trustworthy for release signatures.

Modified:
  radvd/trunk/PKGBUILD

----------+
 PKGBUILD |   12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2021-03-06 14:24:51 UTC (rev 884280)
+++ PKGBUILD	2021-03-06 14:27:26 UTC (rev 884281)
@@ -4,8 +4,8 @@
 # Contributor: Mark Smith <markzzzsmith at yahoo.com.au>
 
 pkgname=radvd
-pkgver=2.18
-pkgrel=2
+pkgver=2.19
+pkgrel=1
 pkgdesc='IPv6 Router Advertisement Daemon'
 url='http://www.litech.org/radvd/'
 license=('custom')
@@ -13,10 +13,14 @@
 makedepends=('check')
 arch=('x86_64')
 backup=('etc/radvd.conf')
-validpgpkeys=('10E2511038172B516DCA5BD36FE19F21451C9A2B') # Reuben Hawkins
+# for unknown reasons upstream has stopped signing the tarballs since version 2.19
+validpgpkeys=(
+  '10E2511038172B516DCA5BD36FE19F21451C9A2B' # Reuben Hawkins
+  '7D0B3CEBE9B85B1F825BCECFEE05E6F6A48F6136' # Robin Hugh Johnson
+)
 source=("http://www.litech.org/radvd/dist/${pkgname}-${pkgver}.tar.xz"{,.asc}
         "${pkgname}.service")
-sha512sums=('f45a600d63a93fc58cc3d1c33545ed641337a82281dbeca2f98a9fee224d38e7c547c1624e02682df007e0215b39b5756f60093bae9264d54e4b388f89b6d108'
+sha512sums=('a1eb40af90fc83ebab2517c16a0f7e85c11338ab276bec400b7c33177748d1e36bc5abd7e373b6742f12f7c690dd7ae6b951bc832c7de9bbb56f7e9bc844ed22'
             'SKIP'
             'f8abe3e0233c33313e768c45b2873bfc70b6461337c57ae6e07196d3e9d23338fdec56b1c92d3fa1a2a691f83fd850588095352570ce3d2c0cc32ac07862f426')
 



More information about the arch-commits mailing list