verify against tahoe-lafs release signing pgp key

2 files changed, 9 insertions, 2 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 02071abe830f..370a45c0e843 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -31,7 +31,9 @@ pkgbase = tahoe-lafs
 	optdepends = python2-numpy: reliability test
 	conflicts = tahoe-lafs-i2p
 	source = https://tahoe-lafs.org/source/tahoe-lafs/releases/allmydata-tahoe-1.10.2.tar.bz2
+	source = https://tahoe-lafs.org/source/tahoe-lafs/releases/allmydata-tahoe-1.10.2.tar.bz2.asc
 	sha256sums = fed5d719c966d9528a45e8ad66e6c8ff3dcb3c06db94775194c7c75566047be7
+	sha256sums = SKIP
 
 pkgname = tahoe-lafs
 
diff --git a/PKGBUILD b/PKGBUILD
index 7670f0487dd7..f54c39d6d23d 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -39,8 +39,13 @@ depends=('openssl>=1.0.2'
 
 optdepends=('python2-numpy: reliability test')
 
-source=("https://tahoe-lafs.org/source/tahoe-lafs/releases/allmydata-tahoe-$pkgver.tar.bz2")
-sha256sums=('fed5d719c966d9528a45e8ad66e6c8ff3dcb3c06db94775194c7c75566047be7')
+source=("https://tahoe-lafs.org/source/tahoe-lafs/releases/allmydata-tahoe-$pkgver.tar.bz2"
+        "https://tahoe-lafs.org/source/tahoe-lafs/releases/allmydata-tahoe-$pkgver.tar.bz2.asc")
+
+sha256sums=('fed5d719c966d9528a45e8ad66e6c8ff3dcb3c06db94775194c7c75566047be7'
+            'SKIP')
+
+validpgpkeys=('E34E62D06D0E69CFCA4179FFBDE0D31D68666A7A')
 
 build(){
     cd "${srcdir}/allmydata-tahoe-${pkgver}"