Re: [pacman-dev] Could makepkg verify .dsc file?

On 16/12/16 08:29, Bruno Pagani wrote:

Hi there,

This is probably some sort of feature request or maybe more general asking.

I have a case where sha*sums are provided in a .dsc signed file (bs1770gain, for which *sane* upstream is Debian: https://packages.debian.org/source/sid/bs1770gain). Apparently, makepkg only supports verifying file with detached signature. Is there a specific reason for that (like this use case is really tiny — I have no actual idea about this) or is it just because it was never implemented?

The format of signed checksum files varies a lot. I don't want to attempt to autodetect each one as that will create a future nightmare. Also, what is gained vs putting the checksums into the PKGBUILD? A