Added gpg signature check on nginx packages

2 files changed, 8 insertions, 1 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 14a509e6a0aa..4494d4655c8a 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,3 +1,5 @@
+# Generated by mksrcinfo v8
+# Tue Oct 30 12:30:39 UTC 2018
 pkgbase = nginx-mainline-mod-echo
 	pkgdesc = Directives "echo", "sleep", "time" and more (module for mainline nginx)
 	pkgver = 0.61
@@ -8,6 +10,7 @@ pkgbase = nginx-mainline-mod-echo
 	license = BSD
 	depends = nginx-mainline
 	source = https://nginx.org/download/nginx-1.15.5.tar.gz
+	source = https://nginx.org/download/nginx-1.15.5.tar.gz.asc
 	source = https://github.com/openresty/echo-nginx-module/archive/v0.61/echo-0.61.tar.gz
 	sha256sums = 1a3a889a8f14998286de3b14cc1dd5b2747178e012d6d480a18aa413985dae6f
 	sha256sums = 2e6a03032555f5da1bdff2ae96c96486f447da3da37c117e0f964ae0753d22aa
diff --git a/PKGBUILD b/PKGBUILD
index f6ab94d260f7..5b6648242f89 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -14,10 +14,14 @@ url="https://github.com/openresty/echo-nginx-module"
 license=('BSD')
 
 source=(
-	https://nginx.org/download/nginx-$_nginxver.tar.gz
+	https://nginx.org/download/nginx-$_nginxver.tar.gz{,.asc}
 	https://github.com/openresty/$_modname-nginx-module/archive/v$pkgver/$_modname-$pkgver.tar.gz
 )
 
+validpgpkeys=(
+	'B0F4253373F8F6F510D42178520A9993A1C052F8' # Maxim Dounin <mdounin@mdounin.ru>
+)
+
 sha256sums=('1a3a889a8f14998286de3b14cc1dd5b2747178e012d6d480a18aa413985dae6f'
             '2e6a03032555f5da1bdff2ae96c96486f447da3da37c117e0f964ae0753d22aa')