From: Alexandre Oliva <lxoliva@fsfla.org>
Date: Wed, 19 Aug 2020 23:43:03 +0000 (-0400)
Subject: verify prevn script signature before reusing them
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=648ec8999546b41676ef245041f845ed40be2b41;p=releases.git

verify prevn script signature before reusing them
---

diff --git a/mkgitrel b/mkgitrel
index bdd71f4fb8a..42a50d34b26 100755
--- a/mkgitrel
+++ b/mkgitrel
@@ -212,6 +212,7 @@ mkdir -v $rel &&
 
 for f in $(ls scripts/v$rel); do
   if cmp scripts/v$rel/$f $reldir/$prevn/$f; then
+    gpg --verify $reldir/$prevn/$f.sign &&
     ln -v $reldir/$prevn/$f $reldir/$prevn/$f.sign $rel/
   else
     ln -v scripts/v$rel/$f $rel/ &&