#!/bin/sh

# curl plugin
#
# ENVIRONMENT VARIABLES:
#	URL		URL to download known_hosts file from
#	CURL_OPTIONS	options passed to curl
#	SIGURL		URL of the OpenPGP signature
#	KEYRING		path to the OpenPGP keyring with certificates
#

set -e

if [ "${SIGURL}" ]; then
	curl -fRz "./current" -m 300 ${CURL_OPTIONS} -o new.sig "${SIGURL}" -o new "${URL}"
	[ -e new ] || exit 0
	gpgv --keyring "${KEYRING}" --status-fd 2 new.sig new || exit 1
	# return 1 because it's not clear what other codes may used
else
	curl -fRz "./current" -m 300 ${CURL_OPTIONS} -o new "${URL}"
fi

# vim:set ft=sh: