Hello community,
here is the log from the commit of package hplip for openSUSE:Factory checked
in at 2013-03-21 22:04:04
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/hplip (Old)
and /work/SRC/openSUSE:Factory/.hplip.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "hplip", Maintainer is "jsm...@suse.com"
Changes:
--------
--- /work/SRC/openSUSE:Factory/hplip/hplip.changes 2013-03-12
15:02:34.000000000 +0100
+++ /work/SRC/openSUSE:Factory/.hplip.new/hplip.changes 2013-03-21
22:04:06.000000000 +0100
@@ -1,0 +2,6 @@
+Thu Mar 14 15:13:09 UTC 2013 - meiss...@suse.com
+
+- use URLs in Source tags
+- added gpg signature checking to %prep.
+
+-------------------------------------------------------------------
New:
----
hplip-3.13.3.tar.gz.asc
hplip.keyring
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ hplip.spec ++++++
--- /var/tmp/diff_new_pack.GHvHNL/_old 2013-03-21 22:04:09.000000000 +0100
+++ /var/tmp/diff_new_pack.GHvHNL/_new 2013-03-21 22:04:09.000000000 +0100
@@ -69,7 +69,9 @@
# For example: /usr/bin/gpg --keyserver pgp.mit.edu --recv-keys 0xA59047B9
# /usr/bin/gpg --verify hplip-3.13.3.tar.gz.asc
hplip-3.13.3.tar.gz
# must result: Good signature from "HPLIP (HP Linux Imaging and Printing)
<hp...@hp.com>"
-Source0: hplip-%{version}.tar.gz
+Source0:
http://prdownloads.sourceforge.net/hplip/hplip-%{version}.tar.gz
+Source1:
http://prdownloads.sourceforge.net/hplip/hplip-%{version}.tar.gz.asc
+Source2: hplip.keyring
# Patch0...Patch9 is for patches from HP:
# Patch10...Patch99 is for Suse patches for the sources from HP:
# Patch10 fixes "... is used uninitialized ..." warnings:
@@ -170,6 +172,11 @@
# Skip testing devel dependencies required by libtool .la files by the
following comment:
# skip-check-libtool-deps
+# starting with 12.3 we can do buildtime gpg signature checking of the tarball.
+%if 0%{?suse_version} > 1220
+BuildRequires: gpg-offline
+%endif
+
%description
The Hewlett-Packard Linux Imaging and Printing project (HPLIP) provides
a unified single and multifunction connectivity solution for HP
@@ -308,6 +315,10 @@
%prep
+# first thing is to verify the GPG signed tarball, starting with openSUSE 12.3.
+%if 0%{?suse_version} > 1220
+%gpg_verify %{S:1}
+%endif
# Be quiet when unpacking:
%setup -q
# Patch10 fix-uninitialized-variables.diff
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
