From 27243de3f527870861632096d49c676daa64f5fe Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Fri, 28 Oct 2022 16:14:24 +0200
Subject: check archive signature

---
 rnp.spec | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/rnp.spec b/rnp.spec
index 5a62524..e3baf26 100644
--- a/rnp.spec
+++ b/rnp.spec
@@ -23,11 +23,15 @@
 Name:          rnp
 Summary:       OpenPGP (RFC4880) tools
 Version:       0.16.2
-Release:       2%{?dist}
+Release:       3%{?dist}
+# From LICENSE.md
 License:       BSD-2-Clause and BSD-3-Clause and Apache-2.0
 
 URL:           https://github.com/rnpgp/rnp
-Source0:       https://github.com/rnpgp/rnp/archive/refs/tags/v%{version}.tar.gz
+Source0:       %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
+Source1:       %{url}/releases/download/v%{version}/v%{version}.tar.gz.asc
+# See https://www.rnpgp.org/openpgp_keys/
+Source2:       %{name}-keyring.gpg
 
 BuildRequires:  cmake >= 3.14
 BuildRequires:  gcc
@@ -71,7 +75,8 @@ for %{libname}.
 
 
 %prep
-%setup -q -n %{name}-%{version}
+%setup -q
+%{?gpgverify:%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'}
 
 
 %build
@@ -114,6 +119,9 @@ for %{libname}.
 
 
 %changelog
+* Fri Oct 28 2022 Remi Collet <remi@remirepo.net> - 0.16.2-3
+- check archive signature
+
 * Fri Oct 28 2022 Remi Collet <remi@remirepo.net> - 0.16.2-2
 - switch from botan-2 to openssl on EL-8
 
-- 
cgit