summaryrefslogtreecommitdiffstats
path: root/source.mk
diff options
context:
space:
mode:
authorPatrick McDermott <patrick.mcdermott@libiquity.com>2019-06-30 21:59:07 (EDT)
committer Patrick McDermott <patrick.mcdermott@libiquity.com>2019-06-30 21:59:07 (EDT)
commit917c97b52a025fa86f96f672ff4608632ba6a0b8 (patch)
treef5f1f0c7a1413e3637965484a1d01d8681b59011 /source.mk
parent72488e1e4e49fb08e4ebe72bd92f3b570b957e17 (diff)
source.mk: Rewrite and use xz
Diffstat (limited to 'source.mk')
-rw-r--r--source.mk49
1 files changed, 33 insertions, 16 deletions
diff --git a/source.mk b/source.mk
index 8634694..ca6b0df 100644
--- a/source.mk
+++ b/source.mk
@@ -1,18 +1,35 @@
-upstream_archive = m4-$(OPK_SOURCE_VERSION_UPSTREAM).tar.bz2
-upstream_url = http://ftp.gnu.org/gnu/m4/$(upstream_archive)
-source_archive = ../m4-$(OPK_SOURCE_VERSION_UPSTREAM).orig.tar.bz2
-keys = 2527436A 2983D606
+z = xz
+keys = \
+ '71C2 CC22 B1C4 6029 27D2 F3AA A7A1 6B4A 2527 436A'
-$(source_archive):
- wget '$(upstream_url)'
- set -e; if gpg --version >/dev/null 2>&1; then \
- wget '$(upstream_url).sig'; \
- [ -e ../keyring.gpg ] || \
- gpg --keyring ../keyring.gpg --no-default-keyring \
- --recv-keys $(keys) || true; \
- gpg --verify --keyring ../keyring.gpg \
- '$(upstream_archive).sig'; \
- fi
- mv '$(upstream_archive)' '$(source_archive)'
+upstream_archive = $(OPK_SOURCE)-$(OPK_SOURCE_VERSION_UPSTREAM).tar.$(z)
+upstream_url = http://ftp.gnu.org/pub/gnu/$(OPK_SOURCE)/$(upstream_archive)
+source_archive = ../$(OPK_SOURCE)-$(OPK_SOURCE_VERSION_UPSTREAM).orig.tar.$(z)
-source: $(source_archive)
+GNUPGHOME = gnupghome
+# TODO: When GnuPG is built with TLS support, delete the second "keyserver" line
+# to switch to a non-SKS keyserver. We can't switch yet, because the Web server
+# at keys.openpgp.org redirects (HTTP 301) to HTTPS (and enforces it with HSTS).
+keyserver = hkps://keys.openpgp.org
+keyserver = hkp://pool.sks-keyservers.net
+keyring = ../keyring.gpg
+cleanup = gpgconf --kill all; rm -Rf '$(GNUPGHOME)'; sleep 5
+
+$(keyring):
+ gpg --recv-keys $(keys) || { rm -Rf '$@'; exit 1; }
+ rm -f '$@~'
+
+$(source_archive): $(keyring)
+ wget -c "$(upstream_url)" "$(upstream_url).sig"
+ gpg --verify "$(upstream_archive).sig"
+ mv "$(upstream_archive)" "$(source_archive)"
+
+source:
+ install -m 0700 -d '$(GNUPGHOME)'
+ umask 0177; printf 'keyserver $(keyserver)\n' \
+ 1>'$(GNUPGHOME)/dirmngr.conf'
+ umask 0177; printf 'no-default-keyring\nkeyring $(keyring)\nverbose\n' \
+ 1>'$(GNUPGHOME)/gpg.conf'
+ GNUPGHOME='$(GNUPGHOME)' $(MAKE) -f ../source.mk "$(source_archive)" \
+ || { $(cleanup); exit 1; }
+ $(cleanup)