commitpkg: Check signature if available

2011-10-31 13:14:16 +01:00 · 2011-10-31 13:14:16 +01:00 · 0e58198f36
parent e07d318c54
commit 0e58198f36
1 changed files with 3 additions and 0 deletions
--- a/commitpkg.in
+++ b/commitpkg.in
@ -165,6 +165,9 @@ for _arch in ${arch[@]}; do
 			gpg --detach-sign --use-agent ${SIGNWITHKEY} "${pkgfile}" || abort
 		fi
 		if [ -f "${sigfile}" ]; then
+			if ! gpg --verify "$sigfile" >/dev/null 2>&1; then
+				abort "Signature ${pkgfile}.sig is incorrect!"
+			fi
 			uploads+=("$sigfile")
 		elif [[ $SIGNPKG == 'y' ]]; then
 			abort "Signature ${pkgfile}.sig was not found"