add tarball signature check

1 files changed, 6 insertions, 0 deletions

diff --git a/php72.spec b/php72.spec
index 4316b48..b638d32 100644
--- a/php72.spec
+++ b/php72.spec
@@ -148,6 +148,9 @@ Source11: php.conf2
 Source12: php-fpm.wants
 Source13: nginx-fpm.conf
 Source14: nginx-php.conf
+# See https://secure.php.net/gpg-keys.php
+Source20: https://www.php.net/distributions/php-keyring.gpg
+Source21: https://www.php.net/distributions/php-%{upver}%{?rcver}.tar.xz.asc
 # Configuration files for some extensions
 Source50: 10-opcache.ini
 Source51: opcache-default.blacklist
@@ -193,6 +196,7 @@ Patch301: php-7.0.0-oldpcre.patch
 
 # WIP
 
+BuildRequires: gnupg2
 BuildRequires: bzip2-devel, curl-devel >= 7.9
 BuildRequires: httpd-devel >= 2.0.46-1, pam-devel
 %if %{with_httpd2410}
@@ -1078,6 +1082,8 @@ low-level PHP extension for the libsodium cryptographic library.
 
 
 %prep
+%{?gpgverify:%{gpgverify} --keyring='%{SOURCE20}' --signature='%{SOURCE21}' --data='%{SOURCE0}'}
+
 : CIBLE = %{name}-%{version}-%{release} oci8=%{with_oci8} libzip=%{with_libzip}
 
 %setup -q -n php-%{upver}%{?rcver}