[aur-general] checksums

[Florian Pritz]

On 04.10.2014 12:54, stef204 wrote:
> To verify integrity, the author does not provide checksums but only a
> gpg .asc file.

Put the .asc file URL in the sources array and makepkg will verify it
automatically. This only works if the base filenames are the same
(foo.tar.gz and foo.tar.gz.asc), but that's likely the case anyway.

You can use shell expansion like so:
source=(http://example.com/foo.tar.gz{,.asc})

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/aur-general/attachments/20141004/f0433c27/attachment.bin>