diff options
Diffstat (limited to 'rapid-tunneling')
| -rwxr-xr-x | rapid-tunneling | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/rapid-tunneling b/rapid-tunneling index c563b75..8699ced 100755 --- a/rapid-tunneling +++ b/rapid-tunneling @@ -10,6 +10,15 @@ fi tmpdir=`mktemp -d` mkdir $tmpdir/recv $tmpdir/send tar xzf "$1" -C $tmpdir/recv + +# The signed data is everything except the signature itself: +(cd $tmpdir/recv; grep -- . * | grep -v ^sig.asc:) >$tmpdir/recv_data +if ! gpg --quiet --verify $tmpdir/recv/sig.asc $tmpdir/recv_data; then + echo >&2 "$0: gpg signature verification failed." + echo >&2 "$0: Maybe someone's playing dirty tricks? Aborting." + exit 7 +fi + user=`cat $tmpdir/recv/user` host=`cat $tmpdir/recv/host` port=`cat $tmpdir/recv/port` |