passepartoutvpn / openssl-apple

A script for compiling OpenSSL for Apple Devices.
Apache License 2.0
144 stars 69 forks source link

Perform GPG Signature Validation on the archive. #40

Closed levigroker closed 3 years ago

levigroker commented 3 years ago

This will download the asc GPG signature file at the same time the OpenSSL archive is downloaded and attempt to perform signature validation against the archive. This will not block the build if gpg is not installed, or signature validation fails, but will instead output an appropriate warning message.

keeshux commented 3 years ago

You will forgive me the push-force, sometimes I'm a bit OCD. :)

Merging now, thank you very much!

keeshux commented 3 years ago

@levigroker before merging: I changed the GPG key server because I was having issues with yours when fetching the OpenSSL public key. Any concern I might be missing?

levigroker commented 3 years ago

@keeshux No worries about changing the keyserver. In general they all should synchronize with each other so picking one over another shouldn't matter (though it appears to have mattered in your case for some reason). Regardless, I have no issue with this change. Thank you for considering this PR. :)