verify prevn script signature before reusing them

diff --git a/mkgitrel b/mkgitrel
index bdd71f4fb8a0c0c320e3aad6f41860ae9665eda3..42a50d34b26b3f034dba485c726dc14c365fff50 100755 (executable)
--- a/mkgitrel
+++ b/mkgitrel
@@ -212,6 +212,7 @@ mkdir -v $rel &&
 
 for f in $(ls scripts/v$rel); do
   if cmp scripts/v$rel/$f $reldir/$prevn/$f; then
+    gpg --verify $reldir/$prevn/$f.sign &&
     ln -v $reldir/$prevn/$f $reldir/$prevn/$f.sign $rel/
   else
     ln -v scripts/v$rel/$f $rel/ &&