From ac44fd59e36d7de163ad152b866576bac1af8f4d Mon Sep 17 00:00:00 2001
From: Andrew Wood <ivarch657@gmail.com>
Date: Sat, 5 Oct 2024 17:41:40 +0100
Subject: [PATCH] Added a hook to write a signed MANIFEST file listing the
 SHA-512 hashes of all included files.

---
 Makefile.am | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Makefile.am b/Makefile.am
index f16fb56..c09c201 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -113,6 +113,9 @@ clean-local:
 # Convenience alias for "make check": "make test"
 test: check
 
+dist-hook:
+	test -n "$(MAINTAINER)" && cd "$(top_distdir)" && find -type f -not -name MANIFEST -exec sha512sum '{}' ';' | sort -k 2 | gpg -u "$(MAINTAINER)" --clearsign > MANIFEST || :
+
 # "release" target - requires MAINTAINER variable to select GPG key.
 release: distcheck
 	gpg --list-secret-keys 2>&1 | grep -F 'uid' | grep -Fq "$(MAINTAINER)"