Arch Linux

Zosoled

Member

Registered: 2023-10-30

Posts: 17

How to verify package signature with OpenSSL pem file?

PKGBUILD only supplies a validpgpkeys property. If the developer only signs with OpenSSL, is there a way to add that to the PKGBUILD so that makepkg can verify it?

Last edited by Zosoled (2024-08-16 08:20:15)

gromit

Package Maintainer (PM)

From: Germany

Registered: 2024-02-10

Posts: 663

Website

Re: How to verify package signature with OpenSSL pem file?

You can do it in the "prepare()" function or in the "verify()" function if you have a recent enough pacman. To learn more about both have a look at PKGBUILD(5)