[LyX/master] lyx-build: check sig in case one really uses download instead of local tarball.

[Pavel Sanda]

commit bbe09eada1de6edb7eb45213eaac4b4b09495f6e
Author: Pavel Sanda <sa...@lyx.org>
Date:   Tue Jun 19 23:53:36 2018 +0200

    lyx-build: check sig in case one really uses download instead of local 
tarball.
---
 development/tools/lyx-build |    7 +++++++
 1 files changed, 7 insertions(+), 0 deletions(-)

diff --git a/development/tools/lyx-build b/development/tools/lyx-build
index 3b064c2..ae9237d 100755
--- a/development/tools/lyx-build
+++ b/development/tools/lyx-build
@@ -105,6 +105,13 @@ if [ ! -d "$BASE/lyx-patch/lyx-$LAST" ]; then
     echo "Will try to download from LyX site....";
     pushd $BASE/lyx-patch/;
     wget ftp://ftp.lyx.org/pub/lyx/stable/${FIRST}x/lyx-$LAST.tar.gz;
+    wget ftp://ftp.lyx.org/pub/lyx/stable/${FIRST}x/lyx-$LAST.tar.gz.sig
+    gpg -q --verify lyx-$LAST.tar.gz.sig
+    if ! [ $? == 0 ]; then
+      echo "Signature wrong!"
+      exit 1;
+    fi
+    rm lyx-$LAST.tar.gz.sig
     tar -zxvf lyx-$LAST.tar.gz;
     if [ ! -f lyx-$LAST.tar.gz ]; then
       echo "Still unable to find directory for last version $LAST.";