# Maintainer: Jerome Leclanche # Previous contributors: # William Gathoye, Emil Vanherp, Alad Wenter, Xavier D., Valere Monseur # Troubleshooting: https://eid.belgium.be/en/faq/google-chromechromium-how-do-i-log # Test if login works: https://iamapps.belgium.be/tma/ pkgname=eid-mw pkgver=5.1.16 pkgrel=1 pkgdesc="The Belgian e-ID (electronic identity card) viewer and Firefox extension" arch=("x86_64") url="https://eid.belgium.be/" license=("LGPL3") depends=("gtk3" "libproxy" "curl" "libbsd") makedepends=("pcsclite") optdepends=( "firefox: Extension for Belgian eid" "acsccid: ACS CCID smart card readers" "ccid: Needed for Belgian Digipass 870" "pcsc-tools: PC/SC smartcard tools" ) source=( "https://dist.eid.belgium.be/continuous/sources/$pkgname-$pkgver-v$pkgver.tar.gz" "https://dist.eid.belgium.be/continuous/sources/$pkgname-$pkgver-v$pkgver.tar.gz.asc" ) sha256sums=('110f8ef95088f14dc9fc3465d8822f0fd78ed02ddb82959814d74e0ce8631dcc' 'SKIP') validpgpkeys=("D95426E309C0492990D8E8E2824A5E0010A04D46") # Upstream has decided not signing sources using the GPG key as this was # confusing users who are not used to use .asc signature files. So while the # binaries proposed on the following page # https://eid.belgium.be/en/using_your_eid/installing_the_eid_software/linux # are signed, the sources are not. It is asked to security-conscious users # using the dist server instead. # # On Wed, Mar 29, 2017 at 11:08:34AM +0200, William Gathoye wrote: # > On 03/29/2017 10:54 AM, Wouter Verhelst wrote: # >> It is not meant for the security-conscious. If you want to be 100% # >> certain, then https://dist.eid.belgium.be/continuous/sources/ is signed # >> by a GPG key. # > # > Ok. I'm gonna switch to that channel again then (for Arch). # # Good, I was hoping you'd say that # # > But then why do you have specified on the eid.belgium.be page that the # > binaries could be checked using the GPG key # > B37D9040098C3DEEE00F6D08A35743EA6773D225 as we cannot check it as the # > .asc file is not present.? # # The precompiled binaries in the repositories that can be found on # files.eid.belgium.be (and for which the "eid-archive" packages on that page add # configuration to supported distributions) *are* signed with that key. The # sources aren't, for reasons as explained above. # # [...] build() { cd "$pkgname-$pkgver-v$pkgver" sed -i "s/c_rehash/openssl rehash/g" plugins_tools/eid-viewer/Makefile.in ./configure --prefix=/usr --libexecdir=/usr/bin --sysconfdir=/etc make } package() { cd "$pkgname-$pkgver-v$pkgver" make install DESTDIR="$pkgdir" }