|
@@ -1,5 +1,7 @@
|
|
|
#!/bin/sh
|
|
#!/bin/sh
|
|
|
|
|
|
|
|
|
|
+set -eu
|
|
|
|
|
+
|
|
|
if test "$1" = "" ; then
|
|
if test "$1" = "" ; then
|
|
|
echo "I need a package as an argument."
|
|
echo "I need a package as an argument."
|
|
|
exit 1
|
|
exit 1
|
|
@@ -59,7 +61,7 @@ $DIGESTOUTPUT
|
|
|
first few characters. If the digest does not match, you do not have
|
|
first few characters. If the digest does not match, you do not have
|
|
|
the right package file. It could even be a forgery.
|
|
the right package file. It could even be a forgery.
|
|
|
|
|
|
|
|
-Frequentlty asked questions:
|
|
|
|
|
|
|
+Frequently asked questions:
|
|
|
|
|
|
|
|
Q: Why not just sign the package file, like you used to do?
|
|
Q: Why not just sign the package file, like you used to do?
|
|
|
A: GPG signatures authenticate file contents, but not file names. If
|
|
A: GPG signatures authenticate file contents, but not file names. If
|
Taylor R Campbell