Switch to SHA256 checksums and add GPG signature verification

1 files changed, 11 insertions, 3 deletions

diff --git a/PKGBUILD b/PKGBUILD
index 64d60bb1cfc3..e28ed77e8e5b 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -8,9 +8,17 @@ url='https://github.com/craigbarnes/dte'
 arch=('i686' 'x86_64' 'armv7l')
 license=('GPL2')
 depends=('glibc' 'ncurses')
-source=("https://craigbarnes.gitlab.io/dte/dist/dte-$pkgver.tar.gz")
-md5sums=('f93a7efa6e167be466b90fc11c8646c6')
-sha1sums=('b0dbf08694e920ca8730b7630a2cb8e975995597')
+validpgpkeys=('A3FB922E15870DA250D9DCE1FBCC7A6B0330BEB4')
+
+source=(
+    "https://craigbarnes.gitlab.io/dist/dte/dte-$pkgver.tar.gz"
+    "https://craigbarnes.gitlab.io/dist/dte/dte-$pkgver.tar.gz.sig"
+)
+
+sha256sums=(
+    '06460364cfbba6e64fecba46012931d238308aa7ea8b5fd21a51b0c2e22e94ea'
+    SKIP
+)
 
 build() {
     cd "$pkgname-$pkgver"