[gentoo-commits] repo/gentoo:master commit in: net-dns/dnssec-root/

["Thomas Deutschmann" <whissi@gentoo.org>]

commit:     1b0c2f134e2582bdb23a1e2f965e865dba1fbe47
Author:     Thomas Deutschmann <whissi <AT> gentoo <DOT> org>
AuthorDate: Mon Nov  8 15:14:43 2021 +0000
Commit:     Thomas Deutschmann <whissi <AT> gentoo <DOT> org>
CommitDate: Mon Nov  8 15:14:54 2021 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1b0c2f13

net-dns/dnssec-root: don't verify signature chain

We are only interested in verifying root-anchors.xml itself.
We do not care about the signature chain.

Closes: https://bugs.gentoo.org/822447
Package-Manager: Portage-3.0.28, Repoman-3.0.3
Signed-off-by: Thomas Deutschmann <whissi <AT> gentoo.org>

 net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild b/net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild
index cf7ee395e9e..7e91c6e3c83 100644
--- a/net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild
+++ b/net-dns/dnssec-root/dnssec-root-20181220-r1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2020 Gentoo Authors
+# Copyright 1999-2021 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="7"
@@ -36,7 +36,8 @@ src_prepare() {
 		openssl smime -verify \
 			-content root-anchors.xml \
 			-in root-anchors.p7s -inform der \
-			-CAfile icannbundle.pem || die "OpenSSL S/Mime verify failed"
+			-CAfile icannbundle.pem \
+			-noverify || die "OpenSSL S/Mime verify failed"
 	else
 		einfo "dev-libs/openssl is not available, skipping optional validation root-anchors.xml"
 	fi