From a1580a1d008753df3bf83bf6ac8b58ddba46d0a5 Mon Sep 17 00:00:00 2001 From: Nathan Ell Date: Wed, 8 Dec 2021 19:26:05 -0700 Subject: [PATCH] dos2unix: Swap to official signature validation In the initial port of dos2unix, there was a miss in the validation of the files. Let's switch to the original author's official signed verification of the source :^) --- Ports/dos2unix/package.sh | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/Ports/dos2unix/package.sh b/Ports/dos2unix/package.sh index 9eb377e9a31..ee284affeb7 100755 --- a/Ports/dos2unix/package.sh +++ b/Ports/dos2unix/package.sh @@ -2,6 +2,9 @@ port=dos2unix version=7.4.2 workdir="${port}-${version}" -files="https://waterlan.home.xs4all.nl/dos2unix/dos2unix-${version}.tar.gz ${port}-${version}.tar.gz 6035c58df6ea2832e868b599dfa0d60ad41ca3ecc8aa27822c4b7a9789d3ae01" +files="https://waterlan.home.xs4all.nl/dos2unix/dos2unix-${version}.tar.gz ${port}-${version}.tar.gz +https://waterlan.home.xs4all.nl/dos2unix/dos2unix-7.4.2.tar.gz.asc ${port}-${version}.tar.gz.asc" depends=("gettext") -auth_type=sha256 +auth_type=sig +auth_import_key="f8f1bea490496a09cca328cc38c1f572b12725be" +auth_opts=("${port}-${version}.tar.gz.asc" "${port}-${version}.tar.gz")