commitpkg: Check signature if available

1 files changed, 3 insertions, 0 deletions

diff --git a/commitpkg.in b/commitpkg.in
index 2216b54..662cb09 100644
--- a/commitpkg.in
+++ b/commitpkg.in
@@ -165,6 +165,9 @@ for _arch in ${arch[@]}; do
 			gpg --detach-sign --use-agent ${SIGNWITHKEY} "${pkgfile}" || abort
 		fi
 		if [ -f "${sigfile}" ]; then
+			if ! gpg --verify "$sigfile" >/dev/null 2>&1; then
+				abort "Signature ${pkgfile}.sig is incorrect!"
+			fi
 			uploads+=("$sigfile")
 		elif [[ $SIGNPKG == 'y' ]]; then
 			abort "Signature ${pkgfile}.sig was not found"