[arch-commits] Commit in fastjar/trunk (PKGBUILD)

[Guillaume Alaux]

    Date: Monday, October 31, 2016 @ 20:57:07
  Author: guillaume
Revision: 279545

Harden source retrieval and checks

Main source file signature is available but unfortunately the key with which
it was created cannot be found on http://keys.gnupg.net which is the key server
used by `makepkg`

Modified:
  fastjar/trunk/PKGBUILD

----------+
 PKGBUILD |    8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2016-10-31 20:34:36 UTC (rev 279544)
+++ PKGBUILD	2016-10-31 20:57:07 UTC (rev 279545)
@@ -6,11 +6,13 @@
 pkgrel=4
 pkgdesc="Sun java jar compatible archiver"
 arch=('i686' 'x86_64')
-url="http://savannah.nongnu.org/projects/fastjar"
+url='https://savannah.nongnu.org/projects/fastjar'
 license=('GPL')
 depends=('zlib' 'texinfo')
-source=("http://download.savannah.nongnu.org/releases/${pkgname}/${pkgname}-${pkgver}.tar.gz")
-md5sums=('d2d264d343d4d0e1575832cc1023c3bf')
+source=(https://download.savannah.nongnu.org/releases/${pkgname}/${pkgname}-${pkgver}.tar.gz)
+# Key cannot be found on http://keys.gnupg.net which makepkg checks
+#validpgpkeys=('EEFF99F6ADE26B135C85141D663843B80213D86E') # Dalibor Topic
+sha256sums=('f156abc5de8658f22ee8f08d7a72c88f9409ebd8c7933e9466b0842afeb2f145')
 
 build() {
   cd ${srcdir}/${pkgname}-${pkgver}