[PATCH 0/4] Initial support for asignify signatures

Jeremy Huntwork jeremy at merelinux.org
Sat Jan 1 19:49:30 UTC 2022


libasignify provides a simple API for checking ed25519 signatures of
blake2 file digests. See: https://github.com/vstakhov/asignify

These changes add support into libalpm, a new configuration option for
the location of trusted public keys that libasignify uses, and modify
the build to support only one signature method, gpgme or asignify.

A future patch will be needed to add appropriate asignify signing
commands to makepkg.

Jeremy Huntwork (4):
  libalpm: Add support for asignify signatures
  Add a configuration option for asignify's key dir
  Add documentation for the AsignifyDir option
  Update meson for asignify

 doc/pacman.conf.5.asciidoc |  8 +++++
 etc/pacman.conf.in         |  1 +
 lib/libalpm/alpm.c         |  2 +-
 lib/libalpm/alpm.h         | 19 +++++++++++
 lib/libalpm/be_package.c   | 22 ++++++++++---
 lib/libalpm/be_sync.c      |  2 +-
 lib/libalpm/error.c        |  8 ++---
 lib/libalpm/handle.c       | 23 ++++++++++++--
 lib/libalpm/handle.h       |  1 +
 lib/libalpm/signing.c      | 65 ++++++++++++++++++++++++++++++++++++++
 lib/libalpm/signing.h      |  1 +
 meson.build                | 33 +++++++++++++------
 meson_options.txt          |  4 +--
 src/pacman/conf.c          | 16 ++++++++++
 src/pacman/conf.h          |  2 ++
 src/pacman/pacman.c        | 40 ++++++++++++++++++-----
 test/pacman/meson.build    |  2 +-
 17 files changed, 216 insertions(+), 33 deletions(-)

--
2.34.1



More information about the pacman-dev mailing list