gpg --import $PACKAGES_DIR/.travis/D52BBB6B.asc
echo 'B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:6:' | gpg --import-ownertrust
+ echo_blue "=== Verifying sha256sums signature"
gpg --verify sha256sums.asc
- grep "$SDK" sha256sums > sha256sums.small
+ echo_blue "=== Verified sha256sums signature."
+ if ! grep "$SDK" sha256sums > sha256sums.small ; then
+ echo_red "=== Can not find $SDK file in sha256sums."
+ echo_red "=== Is \$SDK out of date?"
+ false
+ fi
# if missing, outdated or invalid, download again
if ! sha256sum -c ./sha256sums.small ; then
+ echo_blue "=== sha256 doesn't match or SDK file wasn't downloaded yet."
+ echo_blue "=== Downloading a fresh version"
wget "$SDK_PATH/$SDK.tar.xz" -O "$SDK.tar.xz"
fi
# check again and fail here if the file is still bad
- sha256sum -c ./sha256sums.small
+ echo_blue "Checking sha256sum a second time"
+ if ! sha256sum -c ./sha256sums.small ; then
+ echo_red "=== SDK can not be verified!"
+ false
+ fi
echo_blue "=== SDK is up-to-date"
}