#!/bin/bash GPG=`which gpg` TAR=`which tar` if [ "$1" == "" ]; then echo "Please support a filename." exit 1 fi FILENAME=$1 SIGFILE="" if [ -f $FILENAME.gpg ]; then SIGFILE=${FILENAME}.gpg fi if [ -f $FILENAME.sig ]; then SIGFILE=${FILENAME}.sig fi if [ -f $FILENAME.asc ]; then SIGFILE=${FILENAME}.asc fi echo "Sigfile: '${SIGFILE}'" if [ "${SIGFILE}" = "" ]; then echo "Please type the filename which contains the gpg signature:" read SIGFILE if [ ! -f $SIGFILE ]; then echo "File not found - giving up!" exit 1; fi fi echo "===== GPG Output Start =====" ${GPG} --verify ${SIGFILE} ${FILENAME} > /dev/null RET=$? echo "===== GPG Output End =====" if [ ${RET} -eq 0 ]; then echo "Good signature! Extracting archive..." ${TAR} -xzf $FILENAME else echo "Bad signature! Aborting..." exit 1 fi