Added gpg signature check on nginx packages

2 files changed, 8 insertions, 1 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 2e3e1f208caa..5c109b581e82 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,3 +1,5 @@
+# Generated by mksrcinfo v8
+# Tue Oct 30 12:30:21 UTC 2018
 pkgbase = nginx-mainline-mod-auth_pam
 	pkgdesc = Nginx mainline module to use PAM for simple http authentication
 	pkgver = 1.5.1
@@ -9,6 +11,7 @@ pkgbase = nginx-mainline-mod-auth_pam
 	depends = nginx-mainline
 	depends = pam
 	source = https://nginx.org/download/nginx-1.15.5.tar.gz
+	source = https://nginx.org/download/nginx-1.15.5.tar.gz.asc
 	source = https://github.com/sto/ngx_http_auth_pam_module/archive/v1.5.1/ngx_http_auth_pam_module-1.5.1.tar.gz
 	source = ngx_http_auth_pam_module-critlog.patch::https://patch-diff.githubusercontent.com/raw/sto/ngx_http_auth_pam_module/pull/11.patch
 	sha256sums = 1a3a889a8f14998286de3b14cc1dd5b2747178e012d6d480a18aa413985dae6f
diff --git a/PKGBUILD b/PKGBUILD
index 7ea2fffd3663..4cfb68356e9d 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -14,11 +14,15 @@ url="https://github.com/sto/ngx_http_auth_pam_module"
 license=('BSD')
 
 source=(
-	https://nginx.org/download/nginx-$_nginxver.tar.gz
+	https://nginx.org/download/nginx-$_nginxver.tar.gz{,.asc}
 	https://github.com/sto/$_modname/archive/v$pkgver/$_modname-$pkgver.tar.gz
 	$_modname-critlog.patch::https://patch-diff.githubusercontent.com/raw/sto/ngx_http_auth_pam_module/pull/11.patch
 )
 
+validpgpkeys=(
+	'B0F4253373F8F6F510D42178520A9993A1C052F8' # Maxim Dounin <mdounin@mdounin.ru>
+)
+
 sha256sums=('1a3a889a8f14998286de3b14cc1dd5b2747178e012d6d480a18aa413985dae6f'
             '77676842919134af88a7b4bfca4470223e3a00d287d17c0dbdc9a114a685b6e7'
             '1a59787672cf9c6768cb77c31f19a870eaf556c7b28c8c22a22cf8a7013b93af')