[pacman-dev] Could makepkg verify .dsc file?

[Allan McRae]

On 16/12/16 08:29, Bruno Pagani wrote:
> Hi there,
> 
> This is probably some sort of feature request or maybe more general asking.
> 
> I have a case where sha*sums are provided in a .dsc signed file
> (bs1770gain, for which *sane* upstream is Debian:
> https://packages.debian.org/source/sid/bs1770gain). Apparently, makepkg
> only supports verifying file with detached signature. Is there a
> specific reason for that (like this use case is really tiny — I have no
> actual idea about this) or is it just because it was never implemented?
> 

The format of signed checksum files varies a lot.  I don't want to
attempt to autodetect each one as that will create a future nightmare.

Also, what is gained vs putting the checksums into the PKGBUILD?

A