commit c75fa9df91a0ca6974040ae69b99e3d8ef2f978c
parent 84e2e247786ea4ff5cc715bd527470fe81b01060
Author: Yosl <yosl@seattlemesh.net>
Date: Fri, 14 May 2021 13:14:01 -0400
PACKAGING: Added pgp key verification
Diffstat:
1 file changed, 4 insertions(+), 0 deletions(-)
diff --git a/rpmbuild/SPECS/gnunet.spec b/rpmbuild/SPECS/gnunet.spec
@@ -15,6 +15,8 @@ Group: Productivity/Networking/File-Sharling
URL: https://%{name}.org
%undefine _disable_source_fetch
Source0: https://ftpmirror.gnu.org/gnu/%{name}/%{name}-%{version}.tar.gz
+Source1: https://ftpmirror.gnu.org/gnu/%{name}/%{name}-%{version}.tar.gz.sig
+Source2: https://keys.openpgp.org/vks/v1/by-fingerprint/3D11063C10F98D14BD24D1470B0998EF86F59B6A
%define SHA512SUM0 422637e8f4343a291a8dedf9d4669f5f75b7b6f614d9dde1a5bfcc1565cce25bbb5ef0f8c3cbfca1753b04176b460431545982e6805dc4bb99191c51d6455f4d
BuildRequires: libtool
BuildRequires: libtool-ltdl
@@ -53,6 +55,7 @@ BuildRequires: libcurl-devel
BuildRequires: dbus
BuildRequires: libsodium-devel
BuildRequires: mariadb-devel
+BuildRequires: gnupg2
Requires: libextractor
Requires: openssl
Requires: nss-util
@@ -119,6 +122,7 @@ audio calls.
%prep
echo "%SHA512SUM0 %SOURCE0" | sha512sum -c -
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
%setup