From 0f728e200ad404a199aecc4c61dbf3a3f273adc5 Mon Sep 17 00:00:00 2001 From: Taylor R Campbell Date: Sat, 15 Jan 2011 23:03:20 -0500 Subject: [PATCH] trivial make-signature.sh patch --- contrib/make-signature.sh | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/contrib/make-signature.sh b/contrib/make-signature.sh index a0edb67e6..4aba08b75 100755 --- a/contrib/make-signature.sh +++ b/contrib/make-signature.sh @@ -1,5 +1,7 @@ #!/bin/sh +set -eu + if test "$1" = "" ; then echo "I need a package as an argument." exit 1 @@ -59,7 +61,7 @@ $DIGESTOUTPUT first few characters. If the digest does not match, you do not have the right package file. It could even be a forgery. -Frequentlty asked questions: +Frequently asked questions: Q: Why not just sign the package file, like you used to do? A: GPG signatures authenticate file contents, but not file names. If