forked from westes/flex
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
travis: Hard-code hashes for verifying tarballs
GPG signatures require an external keyserver which might be offline, which is undesirable for build server use. It's equally secure to just hard-code the hashes, provided they're trusted (i.e. you verify a hash against a GPG signature once). Fixes: westes#311. As a side note: the original two signatures (gettext-0.19.8.1.tar.lz.sig and automake-1.15.1.tar.gz.sig) are signed against the files' SHA-1 hash.
- Loading branch information
1 parent
c42de06
commit e63c0bb
Showing
2 changed files
with
26 additions
and
6 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters