From 970b8f03e5519aaaabb9726d10f693ecf8d4af76 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= <pemensik@redhat.com>
Date: Sun, 30 Jul 2023 18:40:44 +0200
Subject: [PATCH] Use self-contained gnupg home for source verification
 (#2225463)

Improve verification using dscverify.
---
 whois.spec | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/whois.spec b/whois.spec
index 2465a8f..4cabd5b 100644
--- a/whois.spec
+++ b/whois.spec
@@ -9,7 +9,7 @@
 
 Name:       whois       
 Version:    5.5.17
-Release:    3%{?dist}
+Release:    4%{?dist}
 Summary:    Improved WHOIS client
 License:    GPL-2.0-or-later
 URL:        https://www.linux.it/~md/software/
@@ -88,10 +88,11 @@ whois tools messages translated into different natural languages.
 
 %prep
 %if 0%{?fedora}
-  TMPKEY=$(mktemp --tmpdir %{name}-XXXXXXX.gpg)
-  gpg --no-default-keyring --keyring "${TMPKEY}" --import %{SOURCE2}
+  export GNUPGHOME="$(mktemp --tmpdir -d %{name}-XXXXXXX)"
+  TMPKEY="$GNUPGHOME/keyring.key"
+  gpg --no-default-keyring --keyring "${TMPKEY}" --trust-model always --import %{SOURCE2}
   dscverify --keyring "${TMPKEY}" %{SOURCE1}
-  rm -f "${TMPKEY}"
+  rm -rf "$GNUPGHOME"
 %endif
 %autosetup -p1
 
@@ -149,6 +150,9 @@ fi
 %endif
 
 %changelog
+* Sun Jul 30 2023 Petr Menšík <pemensik@redhat.com> - 5.5.17-4
+- Use self-contained gnupg home for source verification (#2225463)
+
 * Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 5.5.17-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild