bin/xbps-rindex/sign.c: initialize var for strcmp().
xbps_verify_file_signature: there's no repo->hexfp anymore, compute it instead.