Commit 2301557
tools: fix update-nghttp2 signature verification
Detached signatures must be passed to `gpgv` as a filename before
the datafile (which can be stdin but the detached signature file
cannot be stdin and cannot be piped in).
PR-URL: #61035
Refs: #60113
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>1 parent e8646a7 commit 2301557
1 file changed
Lines changed: 3 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -50,12 +50,13 @@ echo "Fetching nghttp2 source archive" | |||
| 50 | 50 | curl -sL -o "$NGHTTP2_TARBALL" "https://github.com/nghttp2/nghttp2/releases/download/$NGHTTP2_REF/$NGHTTP2_TARBALL" | |
| 51 | 51 | ||
| 52 | 52 | echo "Verifying PGP signature" | |
| 53 | - curl -sL "https://github.com/nghttp2/nghttp2/releases/download/${NGHTTP2_REF}/${NGHTTP2_TARBALL}.asc" \ | ||
| 54 | - | gpgv --keyring "$BASE_DIR/tools/dep_updaters/nghttp.kbx" "$NGHTTP2_TARBALL" | ||
| 53 | + curl -sL -o "${NGHTTP2_TARBALL}.asc" "https://github.com/nghttp2/nghttp2/releases/download/${NGHTTP2_REF}/${NGHTTP2_TARBALL}.asc" | ||
| 54 | + gpgv --keyring "$BASE_DIR/tools/dep_updaters/nghttp.kbx" "${NGHTTP2_TARBALL}.asc" "${NGHTTP2_TARBALL}" | ||
| 55 | 55 | ||
| 56 | 56 | echo "Unpacking archive" | |
| 57 | 57 | tar xJf "$NGHTTP2_TARBALL" | |
| 58 | 58 | rm "$NGHTTP2_TARBALL" | |
| 59 | + rm "${NGHTTP2_TARBALL}.asc" | ||
| 59 | 60 | mv "nghttp2-$NEW_VERSION" nghttp2 | |
| 60 | 61 | ||
| 61 | 62 | echo "Removing everything, except lib/ and COPYING" | |
0 commit comments