Closed levigroker closed 3 years ago
You will forgive me the push-force, sometimes I'm a bit OCD. :)
Merging now, thank you very much!
@levigroker before merging: I changed the GPG key server because I was having issues with yours when fetching the OpenSSL public key. Any concern I might be missing?
@keeshux No worries about changing the keyserver. In general they all should synchronize with each other so picking one over another shouldn't matter (though it appears to have mattered in your case for some reason). Regardless, I have no issue with this change. Thank you for considering this PR. :)
This will download the
asc
GPG signature file at the same time the OpenSSL archive is downloaded and attempt to perform signature validation against the archive. This will not block the build if gpg is not installed, or signature validation fails, but will instead output an appropriate warning message.