Added gpg signature check on nginx packages

2 files changed, 8 insertions, 1 deletions

diff --git a/.SRCINFO b/.SRCINFO
index c21c39d4d13e..a5104cfd3d67 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,3 +1,5 @@
+# Generated by mksrcinfo v8
+# Tue Oct 30 12:30:57 UTC 2018
 pkgbase = nginx-mainline-mod-memc
 	pkgdesc = Extended version of the standard memcached module for mainline nginx
 	pkgver = 0.18
@@ -8,6 +10,7 @@ pkgbase = nginx-mainline-mod-memc
 	license = BSD
 	depends = nginx-mainline
 	source = https://nginx.org/download/nginx-1.15.5.tar.gz
+	source = https://nginx.org/download/nginx-1.15.5.tar.gz.asc
 	source = https://github.com/openresty/memc-nginx-module/archive/v0.18/memc-0.18.tar.gz
 	sha256sums = 1a3a889a8f14998286de3b14cc1dd5b2747178e012d6d480a18aa413985dae6f
 	sha256sums = 4e280d1dcb8b312bc7875604c1e35b17879279126d3d5fbf482aa9cc7c11276d
diff --git a/PKGBUILD b/PKGBUILD
index 527ac61fd232..be1870467ea9 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -14,10 +14,14 @@ url="https://github.com/openresty/memc-nginx-module"
 license=('BSD')
 
 source=(
-	https://nginx.org/download/nginx-$_nginxver.tar.gz
+	https://nginx.org/download/nginx-$_nginxver.tar.gz{,.asc}
 	https://github.com/openresty/$_modname-nginx-module/archive/v$pkgver/$_modname-$pkgver.tar.gz
 )
 
+validpgpkeys=(
+	'B0F4253373F8F6F510D42178520A9993A1C052F8' # Maxim Dounin <mdounin@mdounin.ru>
+)
+
 sha256sums=('1a3a889a8f14998286de3b14cc1dd5b2747178e012d6d480a18aa413985dae6f'
             '4e280d1dcb8b312bc7875604c1e35b17879279126d3d5fbf482aa9cc7c11276d')