Add PGP signature check

2 files changed, 11 insertions, 5 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 0b7adb09ed51..433205a69899 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,5 +1,5 @@
 # Generated by mksrcinfo v8
-# Wed Jan  4 17:13:54 UTC 2017
+# Sat Sep 23 19:36:07 UTC 2017
 pkgbase = java7-openjdk
 	pkgver = 7.u111_2.6.7
 	pkgrel = 1
@@ -33,7 +33,8 @@ pkgbase = java7-openjdk
 	noextract = icedtea_2.6.7_langtools.tar.bz2
 	noextract = icedtea_2.6.7_hotspot.tar.bz2
 	options = !emptydirs
-	source = http://icedtea.classpath.org/download/source/icedtea-2.6.7.tar.gz
+	source = http://icedtea.classpath.org/download/source/icedtea-2.6.7.tar.xz
+	source = http://icedtea.classpath.org/download/source/icedtea-2.6.7.tar.xz.sig
 	source = icedtea_2.6.7_openjdk.tar.bz2::http://icedtea.classpath.org/download/drops/icedtea7/2.6.7/openjdk.tar.bz2
 	source = icedtea_2.6.7_corba.tar.bz2::http://icedtea.classpath.org/download/drops/icedtea7/2.6.7/corba.tar.bz2
 	source = icedtea_2.6.7_jaxp.tar.bz2::http://icedtea.classpath.org/download/drops/icedtea7/2.6.7/jaxp.tar.bz2
@@ -43,7 +44,8 @@ pkgbase = java7-openjdk
 	source = icedtea_2.6.7_hotspot.tar.bz2::http://icedtea.classpath.org/download/drops/icedtea7/2.6.7/hotspot.tar.bz2
 	source = fontconfig-paths.diff
 	source = openjdk7_nonreparenting-wm.diff
-	sha256sums = 55dc6f3cf3a49745132c53592f0980c1aca37385c12dce33fea229471979c88e
+	sha256sums = d0922d6ecffca8e246a0b60db6e1d0c5ff924a8d5a86362991e2d4269d0a9ee4
+	sha256sums = SKIP
 	sha256sums = 5cacafbe543ad4b9179ab1cbfdb7d9baf8aa04d954510b9e7baf0bfef7db6878
 	sha256sums = 0049439ea08f8391c0dae464ceb249f0af9d8e70c68142a734ceb25fa145e764
 	sha256sums = 9fbd60855406879b898843d7eeac2a5df64b0ccdeb927c615c5be648b8fac70b
diff --git a/PKGBUILD b/PKGBUILD
index 4fe900981590..a505edbad5e4 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -26,7 +26,7 @@ makedepends=('jdk7-openjdk' 'libxp' 'libxslt'
 
 _icedtea_url=http://icedtea.classpath.org/download
 _drops_url=${_icedtea_url}/drops/icedtea7/${_icedtea_ver}
-source=(${_icedtea_url}/source/icedtea-${_icedtea_ver}.tar.gz
+source=(${_icedtea_url}/source/icedtea-${_icedtea_ver}.tar.xz{,.sig}
         icedtea_${_icedtea_ver}_openjdk.tar.bz2::${_drops_url}/openjdk.tar.bz2
         icedtea_${_icedtea_ver}_corba.tar.bz2::${_drops_url}/corba.tar.bz2
         icedtea_${_icedtea_ver}_jaxp.tar.bz2::${_drops_url}/jaxp.tar.bz2
@@ -37,7 +37,11 @@ source=(${_icedtea_url}/source/icedtea-${_icedtea_ver}.tar.gz
         fontconfig-paths.diff
         openjdk7_nonreparenting-wm.diff)
 
-sha256sums=('55dc6f3cf3a49745132c53592f0980c1aca37385c12dce33fea229471979c88e'
+# EdDSA key may require `keyserver sks-keyservers.net` in GPG config
+validpgpkeys=('5132579DD1540ED23E04C5A0CFDA0F9B35964222') # Andrew John Hughes
+
+sha256sums=('d0922d6ecffca8e246a0b60db6e1d0c5ff924a8d5a86362991e2d4269d0a9ee4'
+            'SKIP'
             '5cacafbe543ad4b9179ab1cbfdb7d9baf8aa04d954510b9e7baf0bfef7db6878'
             '0049439ea08f8391c0dae464ceb249f0af9d8e70c68142a734ceb25fa145e764'
             '9fbd60855406879b898843d7eeac2a5df64b0ccdeb927c615c5be648b8fac70b'