Initial QSfera import

Desktop/admin/osx/sparkle/dsa_pub.pem

@@ -0,0 +1,12 @@
+-----BEGIN PUBLIC KEY-----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+-----END PUBLIC KEY-----

Desktop/admin/osx/sparkle/sign_verify.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+# Inspired by https://github.com/sparkle-project/Sparkle/issues/896#issuecomment-339904848
+
+if [ "${#}" -ne 3 ]; then
+  echo "$(basename ${0}):"
+  echo
+  echo "  This script can be used to verify the .tbz.sig file in releases during manual testing"
+  echo "  It does the same verification as Sparkle but is itself *not* used by Sparkle."
+  echo
+  echo "  Usage: ${0} public_key_path update_archive_path base64_signature_content"
+  echo
+  exit 1
+fi
+
+set -euxo pipefail
+
+# Make sure we are using system openssl and not one from brew
+openssl() {
+  /usr/bin/openssl "${@}"
+}
+
+openssl dgst -sha1 -binary < "${2}" | openssl dgst -sha1 -verify "${1}" -signature <(echo "${3}" | openssl enc -base64 -d)