Change to new repo at github.com/skycoinproject ; implement signature checking of the PKGBUILD

3 files changed, 12 insertions, 2 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 6f574320480f..00dd1d631882 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -6,7 +6,9 @@ pkgbase = skycoin-font
 	arch = any
 	makedepends = unzip
 	source = https://downloads.skycoin.net/branding/Skycoin-Sans.zip
+	source = https://raw.githubusercontent.com/0pcom/skycoin_archlinux_packages/master/key
 	sha256sums = 5f2a34270c4302d8c6a8b17676208d51698eb136fbff20080b1c7cfe552c908c
+	sha256sums = 41c0a4a42ae64479b008392053f4a947618acd6bb9c3ed2672dafdb2453caa14
 
 pkgname = skycoin-font
 
diff --git a/PKGBUILD b/PKGBUILD
index 2b505eadc311..7a3edacdff12 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -7,8 +7,16 @@ pkgdesc="Skycoin sans font. Skycoin.com"
 url="https://skycoin.com"
 arch=(any)
 makedepends=('unzip')
-source=("https://downloads.skycoin.net/branding/Skycoin-Sans.zip")
-sha256sums=('5f2a34270c4302d8c6a8b17676208d51698eb136fbff20080b1c7cfe552c908c')
+source=("https://downloads.skycoin.net/branding/Skycoin-Sans.zip"
+"https://raw.githubusercontent.com/0pcom/skycoin_archlinux_packages/master/key")
+sha256sums=('5f2a34270c4302d8c6a8b17676208d51698eb136fbff20080b1c7cfe552c908c'
+'41c0a4a42ae64479b008392053f4a947618acd6bb9c3ed2672dafdb2453caa14')
+
+prepare() {
+	gpg --import key
+	#verify PKGBUILD signature
+	gpg --verify ../PKGBUILD.sig ../PKGBUILD
+}
 
 package() {
   cd ${srcdir}
diff --git a/PKGBUILD.sig b/PKGBUILD.sig
index 8157b918b391..bd17e32cda62 100644
--- a/PKGBUILD.sig
+++ b/PKGBUILD.sig