From c45207ad4b4efb18badc704e23aa2a1f8602f616 Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Wed, 11 Sep 2019 11:02:47 +0200
Subject: add tarball signature check

---
 php.spec | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'php.spec')

diff --git a/php.spec b/php.spec
index cc6c2a9..d86dfa0 100644
--- a/php.spec
+++ b/php.spec
@@ -161,6 +161,9 @@ Source9: php.modconf
 Source10: php.conf2
 Source11: php-fpm.init
 Source12: php-fpm.wants
+# See https://secure.php.net/gpg-keys.php
+Source20: https://www.php.net/distributions/php-keyring.gpg
+Source21: https://www.php.net/distributions/php-%{upver}%{?rcver}.tar.xz.asc
 # Configuration files for some extensions
 Source50: 10-opcache.ini
 Source51: opcache-default.blacklist
@@ -205,6 +208,7 @@ Patch301: php-7.0.0-oldpcre.patch
 
 # WIP
 
+BuildRequires: gnupg2
 BuildRequires: bzip2-devel, curl-devel >= 7.9, %{db_devel}
 BuildRequires: httpd-devel >= 2.0.46-1, pam-devel
 %if %{with_httpd2410}
@@ -914,6 +918,8 @@ low-level PHP extension for the libsodium cryptographic library.
 
 
 %prep
+%{?gpgverify:%{gpgverify} --keyring='%{SOURCE20}' --signature='%{SOURCE21}' --data='%{SOURCE0}'}
+
 : Building %{name}-%{version}-%{release} with systemd=%{with_systemd} imap=%{with_imap} interbase=%{with_interbase} freetds=%{with_freetds} sqlite3=%{with_sqlite3} tidy=%{with_tidy} zip=%{with_zip}
 %if 0%{?gh_date}
 %setup -q -n %{gh_project}-%{gh_commit}
-- 
cgit