Verify PGP signatures replace MD5 by SHA256 hashes

Thanks to chikker for suggesting these changes and providing a patch.

1 files changed, 11 insertions, 3 deletions

diff --git a/PKGBUILD b/PKGBUILD
index b3cc04505317..1156df48e0fe 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,15 +1,23 @@
 # Maintainer: Stefan Haller <fgrsnau@gmail.com>
 pkgname=recutils
 pkgver=1.8
-pkgrel=2
+pkgrel=3
 pkgdesc="Set of tools and libraries to access plain text databases called recfiles."
 arch=(i686 x86_64)
 url="https://www.gnu.org/software/recutils/"
 license=('GPL')
 depends=('libgcrypt')
 checkdepends=('check')
-source=("https://ftp.gnu.org/gnu/recutils/$pkgname-$pkgver.tar.gz")
-md5sums=('0ec4f9046cc01092758be9c4988c6fb3')
+# Jose E. Marchesi <jemarch.at.gnu.org>
+validpgpkeys=("BDFA5717FC1DD35C2C3832A23EF90523B304AF08")
+source=(
+   "https://ftp.gnu.org/gnu/recutils/$pkgname-$pkgver.tar.gz"
+   "https://ftp.gnu.org/gnu/recutils/$pkgname-$pkgver.tar.gz.sig"
+)
+sha256sums=(
+   'df8eae69593fdba53e264cbf4b2307dfb82120c09b6fab23e2dad51a89a5b193'
+   'SKIP'
+)
 
 build() {
 	cd "$pkgname-$pkgver"