From 08172f21d6407b176e310ed87d1ee089acb63da8 Mon Sep 17 00:00:00 2001 From: Erick Hitter <git-contrib@ethitter.com> Date: Sat, 23 Feb 2019 14:43:46 -0800 Subject: [PATCH] Fix gpg verification --- scripts/build.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/scripts/build.sh b/scripts/build.sh index ddeee0e..934903f 100644 --- a/scripts/build.sh +++ b/scripts/build.sh @@ -1,5 +1,8 @@ #!/usr/bin/env bash +set -e +set -x + # Log when the build occurred. date echo "" @@ -35,8 +38,6 @@ echo "DEPENDENCY: OpenSSL" git clone -q --recursive --depth 1 https://github.com/openssl/openssl.git -b "$OPENSSL_TAG" "$OPENSSL_DIR" cd "$OPENSSL_DIR" || exit ./config -make -j"$(nproc)" -make install # Dependency: ngx_brotli (no tagged releases) echo "" @@ -55,6 +56,7 @@ cd "$OG_DIR" || exit curl -o "$NGINX_SRC_ARCHIVE" "$NGINX_SRC" curl -o "$NGINX_SRC_ARCHIVE_SIGNATURE" "$NGINX_SIGNING" +gpg --import <(curl https://nginx.org/keys/nginx_signing.key) gpg --verify "$NGINX_SRC_ARCHIVE_SIGNATURE" "$NGINX_SRC_ARCHIVE" tar -zxvf "$NGINX_SRC_ARCHIVE" -C "$NGINX_SRC_DIR" --strip 1 -- GitLab