From 3a6b275cc6590098a265449db03516a5bd22b125 Mon Sep 17 00:00:00 2001
From: strategictraveler <strategictraveler@proton.me>
Date: Tue, 7 Apr 2026 18:02:42 +0000
Subject: [PATCH] www-client/mullvad-browser-bin: bump to 15.0.9, add
 verify-sig

Signed-off-by: strategictraveler <strategictraveler@proton.me>
---
 .../openpgp-keys-mullvad-browser/Manifest     |  1 +
 .../openpgp-keys-mullvad-browser/metadata.xml |  9 ++++++++
 .../openpgp-keys-mullvad-browser-2024.ebuild  | 21 +++++++++++++++++++
 www-client/mullvad-browser-bin/Manifest       |  3 ++-
 ...uild => mullvad-browser-bin-15.0.9.ebuild} | 13 ++++++++++--
 5 files changed, 44 insertions(+), 3 deletions(-)
 create mode 100644 sec-keys/openpgp-keys-mullvad-browser/Manifest
 create mode 100644 sec-keys/openpgp-keys-mullvad-browser/metadata.xml
 create mode 100644 sec-keys/openpgp-keys-mullvad-browser/openpgp-keys-mullvad-browser-2024.ebuild
 rename www-client/mullvad-browser-bin/{mullvad-browser-bin-15.0.8.ebuild => mullvad-browser-bin-15.0.9.ebuild} (83%)

diff --git a/sec-keys/openpgp-keys-mullvad-browser/Manifest b/sec-keys/openpgp-keys-mullvad-browser/Manifest
new file mode 100644
index 0000000000..a022f5e11d
--- /dev/null
+++ b/sec-keys/openpgp-keys-mullvad-browser/Manifest
@@ -0,0 +1 @@
+DIST openpgp-keys-mullvad-browser-2024.asc 6693 BLAKE2B 24e0ee6a4e22bfee7d5eda700f24834e6eaebc6abf8e8aa889349438ddb0f30b4293887e00e7a72aa6bbcd035f68d493c2ae7cac0efb809122c3c57e1d2e699d SHA512 18344b8eb3b61eb7fa44979f294f3e6c54a4afd2dfe40178c347c509560891953c51b74a795f6e5458518e70327d6334173d8c793e50ed7c768ace4c08a47554
diff --git a/sec-keys/openpgp-keys-mullvad-browser/metadata.xml b/sec-keys/openpgp-keys-mullvad-browser/metadata.xml
new file mode 100644
index 0000000000..d954830bc8
--- /dev/null
+++ b/sec-keys/openpgp-keys-mullvad-browser/metadata.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="person">
+			<email>strategictraveler@proton.me</email>
+			<name>strategictraveler</name>
+	</maintainer>
+</pkgmetadata>
+
diff --git a/sec-keys/openpgp-keys-mullvad-browser/openpgp-keys-mullvad-browser-2024.ebuild b/sec-keys/openpgp-keys-mullvad-browser/openpgp-keys-mullvad-browser-2024.ebuild
new file mode 100644
index 0000000000..3d5000fb53
--- /dev/null
+++ b/sec-keys/openpgp-keys-mullvad-browser/openpgp-keys-mullvad-browser-2024.ebuild
@@ -0,0 +1,21 @@
+# Copyright 2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+MY_PN="${PN#openpgp-keys-}"
+DESCRIPTION="OpenPGP keys used to sign Mullvad Browser releases"
+HOMEPAGE="https://github.com/mullvad/mullvad-browser/ https://mullvad.net/"
+SRC_URI="https://openpgpkey.torproject.org/.well-known/openpgpkey/torproject.org/hu/kounek7zrdx745qydx6p59t9mqjpuhdf -> ${P}.asc"
+S="${WORKDIR}"
+
+LICENSE="public-domain"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86"
+
+src_install() {
+	local files=( ${A} )
+
+	insinto /usr/share/openpgp-keys
+	newins - ${MY_PN}.asc < <(cat "${files[@]/#/${DISTDIR}/}" || die)
+}
diff --git a/www-client/mullvad-browser-bin/Manifest b/www-client/mullvad-browser-bin/Manifest
index b799bb2bcd..2a9051b60e 100644
--- a/www-client/mullvad-browser-bin/Manifest
+++ b/www-client/mullvad-browser-bin/Manifest
@@ -1 +1,2 @@
-DIST mullvad-browser-bin-15.0.8.tar.xz 116966912 BLAKE2B 06501805b2759b06a7804d9d9997c0463194dc3821b1ee60177e5e03582a69e0c8d9efd4fda238ec4e0d3d69987a0754e77fe55324f18cb30a5ac8c27c173785 SHA512 ea4e29fe1d6b13cb9892a4ff1154673419edf36bf515d7ce356249e20a91e2b15136fe9c01344f15d5f7ffe424e41dec563516a1724e18c96d9dc7bb1786f6ef
+DIST mullvad-browser-bin-15.0.9.tar.xz 116863208 BLAKE2B 7ca85a69797b6573438ff8c5c85c3e6d32676da64cb26639b90504a0675fd335a983b93dd10e3d1802bf53d67f918316c573665ca5b217fc539cf59dafab005c SHA512 5080e45a43ee56f36db4c114760c5b81464e3250254413c3d3e07fd8d50d6b567c2281e26dd60ecf960f52b95b8365ec67698c5088b49d6a980b12b0832b44a8
+DIST mullvad-browser-bin-15.0.9.tar.xz.asc 833 BLAKE2B a7ae131a4ab66ddb1d92c1b5093f7b0db7489184e39e7c05934fa2faf8076ba5ca7e482224959ddc383ec4c31af9f3577c6e433cbbc25f07533f3349391bd6e8 SHA512 cf2cee150c89b96024ddb49ee4637f595065e3ec10d082ac165d7135d2f4e87f93aabfd15b76fa1304fc0f397e97077a26d08136190470876cebeb97e6005d8e
diff --git a/www-client/mullvad-browser-bin/mullvad-browser-bin-15.0.8.ebuild b/www-client/mullvad-browser-bin/mullvad-browser-bin-15.0.9.ebuild
similarity index 83%
rename from www-client/mullvad-browser-bin/mullvad-browser-bin-15.0.8.ebuild
rename to www-client/mullvad-browser-bin/mullvad-browser-bin-15.0.9.ebuild
index a83b8300f0..89a03bf0b4 100644
--- a/www-client/mullvad-browser-bin/mullvad-browser-bin-15.0.8.ebuild
+++ b/www-client/mullvad-browser-bin/mullvad-browser-bin-15.0.9.ebuild
@@ -3,11 +3,15 @@
 
 EAPI=8
 
-inherit desktop optfeature xdg
+inherit desktop optfeature xdg verify-sig
 
 DESCRIPTION="The Mullvad Browser is developed to minimize tracking and fingerprinting."
 HOMEPAGE="https://github.com/mullvad/mullvad-browser/ https://mullvad.net/"
-SRC_URI="https://github.com/mullvad/mullvad-browser/releases/download/${PV}/mullvad-browser-linux-x86_64-${PV}.tar.xz -> ${P}.tar.xz"
+SRC_NAME="https://github.com/mullvad/mullvad-browser/releases/download/${PV}/mullvad-browser-linux-x86_64-${PV}.tar.xz"
+SRC_URI="
+	${SRC_NAME} -> ${P}.tar.xz
+	verify-sig? ( ${SRC_NAME}.asc -> ${P}.tar.xz.asc )
+"
 
 S="${WORKDIR}"
 LICENSE="MPL-2.0"
@@ -44,6 +48,11 @@ RDEPEND="
 	x11-libs/libXt
 	x11-libs/libXtst
 "
+BDEPEND="
+	verify-sig? ( sec-keys/openpgp-keys-mullvad-browser )
+"
+
+VERIFY_SIG_OPENPGP_KEY_PATH=${BROOT}/usr/share/openpgp-keys/mullvad-browser.asc
 
 QA_PREBUILT="*"