From 2e04f2d247011910449616959f6a9501aea91c43 Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Wed, 11 Sep 2019 10:43:15 +0200
Subject: add tarball signature check

---
 php74.spec | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'php74.spec')

diff --git a/php74.spec b/php74.spec
index 8070b45..540d67f 100644
--- a/php74.spec
+++ b/php74.spec
@@ -129,6 +129,9 @@ Source11: php.conf2
 Source12: php-fpm.wants
 Source13: nginx-fpm.conf
 Source14: nginx-php.conf
+# See https://secure.php.net/gpg-keys.php
+Source20: https://www.php.net/distributions/php-keyring.gpg
+Source21: https://www.php.net/distributions/php-%{upver}%{?rcver}.tar.xz.asc
 # Configuration files for some extensions
 Source50: 10-opcache.ini
 Source51: opcache-default.blacklist
@@ -166,6 +169,7 @@ Patch300: php-7.0.10-datetests.patch
 
 # WIP
 
+BuildRequires: gnupg2
 BuildRequires: bzip2-devel
 BuildRequires: pkgconfig(libcurl)  >= 7.15.5
 BuildRequires: httpd-devel >= 2.0.46-1
@@ -1132,6 +1136,8 @@ in pure PHP.
 
 
 %prep
+%{?gpgverify:%{gpgverify} --keyring='%{SOURCE20}' --signature='%{SOURCE21}' --data='%{SOURCE0}'}
+
 : CIBLE = %{name}-%{version}-%{release} oci8=%{with_oci8} libzip=%{with_libzip}
 
 %setup -q -n php-%{upver}%{?rcver}
-- 
cgit