diff options
| -rw-r--r-- | pcr/samhain/PKGBUILD | 6 | ||||
| -rw-r--r-- | pcr/samhain/PKGBUILD.sig | bin | 543 -> 543 bytes |
2 files changed, 3 insertions, 3 deletions
diff --git a/pcr/samhain/PKGBUILD b/pcr/samhain/PKGBUILD index ca13928b1..e57e3527a 100644 --- a/pcr/samhain/PKGBUILD +++ b/pcr/samhain/PKGBUILD @@ -1,7 +1,7 @@ # Maintainer: Luke R. <g4jc@openmailbox.org> GPG: rsa4096/3EAE8697 pkgname=samhain -pkgver=4.1.4 +pkgver=4.1.5 pkgrel=1 pkgdesc="file integrity / intrusion detection system" arch=(i686 x86_64) @@ -13,7 +13,7 @@ source=("http://www.la-samhna.de/samhain/${pkgname}-current.tar.gz" 'PKGBUILD') validpgpkeys=('CB6E213A349B8DF9E96B622AC3F4FFCF3EAE8697' # PKGBUILD Maintainer's key 'EF6CEF54701A0AFDB86AF4C31AAD26C80F571F6C') # Rainer Wichmann -sha512sums=('72e75e7a34705fa61d48c82e4c0ab1ac523c9bd5480c9335e305230e04d7c6295094ef616d9fca05b091d99659982d130812be36e9676ede68d743a4a1c46013' +sha512sums=('d71517890ca24eaf27053760b35bd06e566b18b14b7439f81067ff1ec6f1fcad0a7f4eb2d6d1fd2f30f198b3ce6638a1a2fda462b5a13bf6e532606cbf765ad1' 'SKIP' 'SKIP') @@ -24,7 +24,7 @@ tar -ztvf samhain-current.tar.gz | head -n1 | awk '{print $6}' | sed "s/samhain- build() { gpg --verify PKGBUILD.sig PKGBUILD echo "Note: If the GPG verification fails, import the PKGBUILD maintainer's GPG key. See: https://wiki.parabola.nu/GnuPG#Import_key" - whirlpoolsum=('515e5d2c297e2ca2e0d69d0bad200eb4bc81449a907346c9976124381a9ab910a6fca6024853ce76d21928d12281aa236b5ed76ac3df511cef3b4f5766a865fc') + whirlpoolsum=('2860728405365baee040d9f4ed9fa2967a8f3402ccf3e2b0c3e8b6a0c1fe58189cb658e93a864474234e018300e2db166adc13c6df3dfcb9d514c3b029634d16') [[ "$(openssl dgst -r -whirlpool samhain-current.tar.gz | awk '{print $1}')" = ${whirlpoolsum} ]] && echo "Whirlpool checksum passed." || { echo "Whirlpool checksum failed!!" ; exit 1; } # This is an added security layer. If SHA512 for some unlikely reason fails, whirlpool will check and abort if it too fails to match. gpg --verify samhain-${pkgver}.tar.gz.asc samhain-${pkgver}.tar.gz echo "Note: If the GPG verification fails, import the Samhain GPG key: http://www.la-samhna.de/samhain/s_rkey.html" diff --git a/pcr/samhain/PKGBUILD.sig b/pcr/samhain/PKGBUILD.sig Binary files differindex b53a415a6..e248a3b67 100644 --- a/pcr/samhain/PKGBUILD.sig +++ b/pcr/samhain/PKGBUILD.sig |