From 095c10df28d1d36eaba84101cfc1ed3d2b53176a Mon Sep 17 00:00:00 2001 From: Daiki Ueno Date: Mon, 25 Jul 2022 14:17:35 +0900 Subject: [PATCH] Do not treat GPG verification errors as fatal When building the package under FIPS, EdDSA signature verification is not allowed. Related: #2097327 Signed-off-by: Daiki Ueno --- gnutls.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/gnutls.spec b/gnutls.spec index aaaa962..2f2507f 100644 --- a/gnutls.spec +++ b/gnutls.spec @@ -183,7 +183,10 @@ This package contains Guile bindings for the library. %endif %prep -%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}' +# Workaround: to allow building the package under FIPS, do not treat +# errors in the GPG check as fatal, where EdDSA signature verification +# is not allowed: +%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}' || : %autosetup -p1 -S git %if %{with bootstrap}