add gpg signature checking

2 files changed, 9 insertions, 3 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 6dd175e3ca1f..efc71cc92240 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,5 +1,5 @@
 # Generated by mksrcinfo v8
-# Thu Jun 28 08:17:47 UTC 2018
+# Thu Jul 19 16:07:59 UTC 2018
 pkgbase = hibiscus
 	pkgdesc = HBCI banking plugin for jameica.
 	pkgver = 2.8.3
@@ -15,9 +15,11 @@ pkgbase = hibiscus
 	depends = libstdc++5
 	optdepends = pcsclite
 	options = !strip
-	source = hibiscus-2.8.3.zip::https://www.willuhn.de/projects/hibiscus/releases/2.8/hibiscus.zip
+	source = https://www.willuhn.de/products/hibiscus/releases/2.8/hibiscus-2.8.3.zip
+	source = https://www.willuhn.de/products/hibiscus/releases/2.8/hibiscus-2.8.3.zip.asc
 	source = hibiscus.desktop
 	sha512sums = 5464ac7f63cf87abd701dadfb0523ed3ab5115375f3b7d24bf58db757189840b60fd16231afd043f5f2982fd64d9b0e129e62e1775bf281b8d72dec647dd5022
+	sha512sums = SKIP
 	sha512sums = ceea9cc5cf438893b2f5dfe46f46840448353f35719216ccca0b8dd12369d4e3c91d393c7c8b5b842a64537c61864ce8ca48e1895bb3f41c5083794399a21925
 
 pkgname = hibiscus
diff --git a/PKGBUILD b/PKGBUILD
index 047f7aef6ad5..25df8c7ef5ce 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -12,8 +12,12 @@ makedepends=('unzip')
 optdepends=('pcsclite')
 options=('!strip')
 install=hibiscus.install
-source=("${pkgname}-${pkgver}.zip::https://www.willuhn.de/projects/hibiscus/releases/${_pkgver}/${pkgname}.zip" "hibiscus.desktop")
+source=("https://www.willuhn.de/products/hibiscus/releases/2.8/hibiscus-${pkgver}.zip"
+"https://www.willuhn.de/products/hibiscus/releases/2.8/hibiscus-${pkgver}.zip.asc"
+"hibiscus.desktop")
+validpgpkeys=("7314FBDE7D38EE5610D291B65A8ED9CFC0DB6C70") # Olaf Willuhn <info@willuhn.de>
 sha512sums=('5464ac7f63cf87abd701dadfb0523ed3ab5115375f3b7d24bf58db757189840b60fd16231afd043f5f2982fd64d9b0e129e62e1775bf281b8d72dec647dd5022'
+            'SKIP'
             'ceea9cc5cf438893b2f5dfe46f46840448353f35719216ccca0b8dd12369d4e3c91d393c7c8b5b842a64537c61864ce8ca48e1895bb3f41c5083794399a21925')
 
 package() {