Commit d16ccd3c authored by Ondrej Sury's avatar Ondrej Sury

Strip the GPG verification as IANA doesn't provide the GPG signatures anymore

parent cd03635f
......@@ -7,7 +7,6 @@ Uploaders: Ondřej Surý <ondrej@debian.org>,
Build-Depends: debhelper (>= 8.0.0),
unbound-anchor,
openssl,
gnupg2,
bind9utils,
libxml2-utils
Standards-Version: 3.9.6
......
......@@ -14,14 +14,6 @@ override_dh_auto_build:
# Verify root-anchors.xml using OpenSSL
openssl smime -verify -noverify -inform DER -in root-anchors.p7s -content root-anchors.xml
# Verify root-anchors.xml using OpenPGP
mkdir -m 0700 -p $(CURDIR)/.gnupg/
GNUPGHOME=$(CURDIR)/.gnupg/ gpg2 --quiet --import $(CURDIR)/icann.pgp
echo "2FBB91BCAAEE0ABE1F8031C7D1AFBCE00F6C91D2:6:" | \
GNUPGHOME=$(CURDIR)/.gnupg/ gpg2 --quiet --import-ownertrust
GNUPGHOME=$(CURDIR)/.gnupg/ gpg2 --quiet --verify root-anchors.asc root-anchors.xml
rm -rf .gnupg/
# Create key from validated root-anchors.xml
echo \
"$$(xmllint --xpath '//TrustAnchor/Zone/text()' root-anchors.xml) IN DS" \
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment