Added gpg signature check on nginx packages

2 files changed, 8 insertions, 1 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 3d423db0a60b..0b4e59fb263f 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,3 +1,5 @@
+# Generated by mksrcinfo v8
+# Tue Oct 30 12:31:45 UTC 2018
 pkgbase = nginx-mainline-mod-redis2
 	pkgdesc = Redis 2.0 protocol module for mainline nginx
 	pkgver = 0.14
@@ -8,6 +10,7 @@ pkgbase = nginx-mainline-mod-redis2
 	license = BSD
 	depends = nginx-mainline
 	source = https://nginx.org/download/nginx-1.15.5.tar.gz
+	source = https://nginx.org/download/nginx-1.15.5.tar.gz.asc
 	source = https://github.com/openresty/redis2-nginx-module/archive/v0.14/redis2-0.14.tar.gz
 	sha256sums = 1a3a889a8f14998286de3b14cc1dd5b2747178e012d6d480a18aa413985dae6f
 	sha256sums = d830e072fcb4acee8490ba3e38eee6034fd884a954d17ad4efeb397032c58a71
diff --git a/PKGBUILD b/PKGBUILD
index f0fbc8d27e3e..14608336c50f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -14,10 +14,14 @@ url="https://github.com/openresty/redis2-nginx-module"
 license=('BSD')
 
 source=(
-	https://nginx.org/download/nginx-$_nginxver.tar.gz
+	https://nginx.org/download/nginx-$_nginxver.tar.gz{,.asc}
 	https://github.com/openresty/$_modname-nginx-module/archive/v$pkgver/$_modname-$pkgver.tar.gz
 )
 
+validpgpkeys=(
+	'B0F4253373F8F6F510D42178520A9993A1C052F8' # Maxim Dounin <mdounin@mdounin.ru>
+)
+
 sha256sums=('1a3a889a8f14998286de3b14cc1dd5b2747178e012d6d480a18aa413985dae6f'
             'd830e072fcb4acee8490ba3e38eee6034fd884a954d17ad4efeb397032c58a71')