Changeset 2f1c88e in mainline

Timestamp:

2018-04-05T21:06:05Z (6 years ago)

Author:

Jakub Jermar <jakub@…>

Branches:

lfn, master, serial, ticket/834-toolchain-update, topic/msim-upgrade, topic/simplify-dev-export

Children:

231c770

Parents:

4618998

git-author:

Jakub Jermar <jakub@…> (2018-04-05 20:58:25)

git-committer:

Jakub Jermar <jakub@…> (2018-04-05 21:06:05)

Message:

Make it easier to bump QEMU version

Instead of manually computing and comparing the MD5 sum, use gpg to
verify the signature of the downloaded QEMU tarball.

File:

• contrib/qemu/build-from-scratch.sh (modified) (2 diffs)

contrib/qemu/build-from-scratch.sh

@@ -34 +34 @@
 TARBALL=${BASENAME}.tar.bz2
 SOURCEDIR=${BASENAME}
-URL=http://wiki.qemu-project.org/download/${TARBALL}
+URL=https://download.qemu.org/${TARBALL}
 REPO=git://git.qemu.org/qemu.git
-MD5="335994a755bc655e88a87aeb36bfc0b9"
 
 OPENSPARC_TARBALL="OpenSPARCT1_Arch.1.5.tar.bz2"
@@ -91 +90 @@
         fi
 
-        if [ "`md5sum ${TARBALL} | cut -f 1 -d " "`" != ${MD5} ]; then
-                echo Wrong MD5 checksum
+        if [ ! -f ${TARBALL}.sig ]; then
+                wget ${URL}.sig
+        fi
+
+        gpg --verify ${TARBALL}.sig ${TARBALL}
+        if [ $? -ne 0 ]; then
+                echo Unable to verify the signature
                 exit
         fi