From 036ccfaec5d698ccd24bbd34c656f3e63d7f9484 Mon Sep 17 00:00:00 2001 From: Zoltan Fridrich Date: Wed, 9 Nov 2022 10:44:46 +0100 Subject: [PATCH] Enable source archive verification again Resolves: rhbz#2127094 Signed-off-by: Zoltan Fridrich --- gnutls.spec | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/gnutls.spec b/gnutls.spec index 5880299..667b670 100644 --- a/gnutls.spec +++ b/gnutls.spec @@ -197,10 +197,7 @@ This package contains Guile bindings for the library. %endif %prep -# Workaround: to allow building the package under FIPS, do not treat -# errors in the GPG check as fatal, where EdDSA signature verification -# is not allowed: -%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}' || : +%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}' %autosetup -p1 -S git @@ -398,8 +395,9 @@ make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null %endif %changelog -* Mon Nov 07 2022 Zoltan Fridrich - 3.7.6-13 +* Tue Nov 15 2022 Zoltan Fridrich - 3.7.6-13 - fips: make XTS key check failure not fatal (#2130971) +- enable source archive verification again (#2127094) * Tue Sep 27 2022 Daiki Ueno - 3.7.6-12 - fips: mark PBKDF2 with short key and output sizes non-approved