# somehow GPG keys are not valid, I don't care anymore. Maybe we
# should make a generic straw in the build slave just to build without
# signature verification as a fallback..
source=(${source[0]})
sha1sums=(${sha1sums[0]})