bughz/3proxy
1
0
Fork 0
mirror of https://github.com/3proxy/3proxy.git synced 2026-08-26 09:55:48 +08:00
Code Issues Actions 10 Packages Projects Releases Wiki Activity

rpm signing: accept non-RSA signature headers

Browse Source 
The release key is ed25519, so rpm stores the header signature in
DSAHEADER (EdDSA/SHA256) and RSAHEADER is empty. The verification only
looked at RSAHEADER and failed correctly signed packages.
This commit is contained in:
Vladimir Dubrovin 2026-08-21 15:33:58 +03:00
parent aeee37998e
commit 63cc737b62
3 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/build-rpm-arm64.yml vendored
View File

@ -111,6 +111,9 @@ jobs:
rm -f /tmp/gpgpass /tmp/signtest /tmp/signtest.sig rm -f /tmp/gpgpass /tmp/signtest /tmp/signtest.sig
for f in *.rpm; do for f in *.rpm; do
sig=$(rpm -qp --qf '%{RSAHEADER:pgpsig}' "$f" 2>/dev/null) sig=$(rpm -qp --qf '%{RSAHEADER:pgpsig}' "$f" 2>/dev/null)
case "$sig" in ""|"(none)")
sig=$(rpm -qp --qf '%{DSAHEADER:pgpsig}' "$f" 2>/dev/null) ;;
esac
case "$sig" in ""|"(none)") case "$sig" in ""|"(none)")
echo "$f is not signed" echo "$f is not signed"
echo "--- rpm version ---"; rpm --version echo "--- rpm version ---"; rpm --version

3
.github/workflows/build-rpm-armhf.yml vendored
View File

@ -144,6 +144,9 @@ jobs:
rm -f /tmp/gpgpass /tmp/signtest /tmp/signtest.sig rm -f /tmp/gpgpass /tmp/signtest /tmp/signtest.sig
for f in *.rpm; do for f in *.rpm; do
sig=$(rpm -qp --qf '%{RSAHEADER:pgpsig}' "$f" 2>/dev/null) sig=$(rpm -qp --qf '%{RSAHEADER:pgpsig}' "$f" 2>/dev/null)
case "$sig" in ""|"(none)")
sig=$(rpm -qp --qf '%{DSAHEADER:pgpsig}' "$f" 2>/dev/null) ;;
esac
case "$sig" in ""|"(none)") case "$sig" in ""|"(none)")
echo "$f is not signed" echo "$f is not signed"
echo "--- rpm version ---"; rpm --version echo "--- rpm version ---"; rpm --version

3
.github/workflows/build-rpm-x86-64.yml vendored
View File

@ -112,6 +112,9 @@ jobs:
rm -f /tmp/gpgpass /tmp/signtest /tmp/signtest.sig rm -f /tmp/gpgpass /tmp/signtest /tmp/signtest.sig
for f in *.rpm; do for f in *.rpm; do
sig=$(rpm -qp --qf '%{RSAHEADER:pgpsig}' "$f" 2>/dev/null) sig=$(rpm -qp --qf '%{RSAHEADER:pgpsig}' "$f" 2>/dev/null)
case "$sig" in ""|"(none)")
sig=$(rpm -qp --qf '%{DSAHEADER:pgpsig}' "$f" 2>/dev/null) ;;
esac
case "$sig" in ""|"(none)") case "$sig" in ""|"(none)")
echo "$f is not signed" echo "$f is not signed"
echo "--- rpm version ---"; rpm --version echo "--- rpm version ---"; rpm --version