https://en.opensuse.org/openSUSE:Package_source_verification On 25/09/2018 22.53, Bjoern Voigt wrote:
Currently the package "maildrop" from server:mail repository fails to build for many distributions, e.g. for Tumbleweed, Leap 42.3, Leap 15.0 and Factory.
https://build.opensuse.org/package/show/server:mail/maildrop
The error message is "nothing provides gpg-offline".
The maildrop.spec file contains the following GPG related entries:
%if 0%{?suse_version} >= 1230 BuildRequires: gpg-offline %endif
[...]
%prep %if 0%{?suse_version} >= 1230 %gpg_verify %{SOURCE1} %endif
The macro %gpg_verify is unavailable (tested with Tumbleweed).
What is currently the right way to verify GPG signatures of sources? What is a good example package for GPG verification?
Greetings, Björn