FS#57149 - [libuv] Add PGP signature verification

Attached to Project: Arch Linux
Opened by Chih-Hsuan Yen (yan12125) - Friday, 19 January 2018, 03:44 GMT
Last edited by Felix Yan (felixonmars) - Friday, 25 September 2020, 18:07 GMT
Task Type Feature Request
Category Packages: Extra
Status Closed
Assigned To Felix Yan (felixonmars)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No


https://dist.libuv.org/dist/v1.19.0/ provides tarballs with signatures. I suggest to use that instead of GitHub tarballs.

https://dist.libuv.org/dist/ is the "Releases" link in http://libuv.org/. The key to sign the aforementioned tarball can be found at https://github.com/libuv/libuv/blob/v1.x/MAINTAINERS.md

Additional info:
extra/libuv 1.19.0-2

Steps to reproduce:
This task depends upon

Closed by  Felix Yan (felixonmars)
Friday, 25 September 2020, 18:07 GMT
Reason for closing:  Implemented
Comment by Chih-Hsuan Yen (yan12125) - Sunday, 06 September 2020, 15:28 GMT
FWIW, here is a working PKGBUILD. Note that I tested with `extra-x86_64-build -- -- --nocheck` as check() failed in `udp_multicast_join6` even after I disabled firewalld on my machine [1].

[1] https://github.com/libuv/libuv/issues/2827
   PKGBUILD (1.3 KiB)
Comment by T.J. Townsend (blakkheim) - Friday, 25 September 2020, 16:38 GMT
Also available as a signed git tag in https://bugs.archlinux.org/task/67998