From c26168119320ca5b03e6b420e3c4192d1e2ecc6a Mon Sep 17 00:00:00 2001
From: Guillem Jover <guillem@hadrons.org>
Date: Mon, 30 Sep 2024 02:00:58 +0200
Subject: Current gpgv requires the datafile for detached signatures

Otherwise we get the following error:

  gpgv: no signed data
  gpgv: can't hash datafile: No data
---
 plugins/curl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'plugins/curl')

diff --git a/plugins/curl b/plugins/curl
index 989891a..b9dd2cb 100755
--- a/plugins/curl
+++ b/plugins/curl
@@ -14,7 +14,7 @@ set -e
 if [ "${SIGURL}" ]; then
 	curl -fRz "./current" -m 300 ${CURL_OPTIONS} -o new.sig "${SIGURL}" -o new "${URL}"
 	[ -e new ] || exit 0
-	gpgv --keyring "${KEYRING}" --status-fd 2 new.sig || exit 1
+	gpgv --keyring "${KEYRING}" --status-fd 2 new.sig new || exit 1
 	# return 1 because it's not clear what other codes may used
 else
 	curl -fRz "./current" -m 300 ${CURL_OPTIONS} -o new "${URL}"
-- 
cgit v1.2.3