From 08172f21d6407b176e310ed87d1ee089acb63da8 Mon Sep 17 00:00:00 2001
From: Erick Hitter <git-contrib@ethitter.com>
Date: Sat, 23 Feb 2019 14:43:46 -0800
Subject: [PATCH] Fix gpg verification

---
 scripts/build.sh | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/scripts/build.sh b/scripts/build.sh
index ddeee0e..934903f 100644
--- a/scripts/build.sh
+++ b/scripts/build.sh
@@ -1,5 +1,8 @@
 #!/usr/bin/env bash
 
+set -e
+set -x
+
 # Log when the build occurred.
 date
 echo ""
@@ -35,8 +38,6 @@ echo "DEPENDENCY: OpenSSL"
 git clone -q --recursive --depth 1 https://github.com/openssl/openssl.git -b "$OPENSSL_TAG" "$OPENSSL_DIR"
 cd "$OPENSSL_DIR" || exit
 ./config
-make -j"$(nproc)"
-make install
 
 # Dependency: ngx_brotli (no tagged releases)
 echo ""
@@ -55,6 +56,7 @@ cd "$OG_DIR" || exit
 
 curl -o "$NGINX_SRC_ARCHIVE" "$NGINX_SRC"
 curl -o "$NGINX_SRC_ARCHIVE_SIGNATURE" "$NGINX_SIGNING"
+gpg --import <(curl https://nginx.org/keys/nginx_signing.key)
 gpg --verify "$NGINX_SRC_ARCHIVE_SIGNATURE" "$NGINX_SRC_ARCHIVE"
 
 tar -zxvf "$NGINX_SRC_ARCHIVE" -C "$NGINX_SRC_DIR" --strip 1
-- 
GitLab