[HandBrake] add GPG signature and verify it in prep

commit cb141ffd05cf226f73030e86def54ce71bdd779d Author: Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net&gt; Date: Fri Jul 21 11:37:26 2017 +0200 add GPG signature and verify it in prep .gitignore | 1 + HandBrake.spec | 9 +++++++++ gpg-keyring-1629C061B3DDE7EB4AE34B81021DB8B44E4A8645.gpg | Bin 0 -> 2226 bytes sources | 1 + 4 files changed, 11 insertions(+) --- diff --git a/.gitignore b/.gitignore index a0c4de8..0e1739f 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,3 @@ /HandBrake-1.0.3.tar.bz2 /HandBrake-1.0.7.tar.bz2 +/HandBrake-1.0.7.tar.bz2.sig diff --git a/HandBrake.spec b/HandBrake.spec index d86602a..0de6337 100644 --- a/HandBrake.spec +++ b/HandBrake.spec @@ -24,6 +24,11 @@ URL: http://handbrake.fr/ %if 0%{?tag:1} Source0: https://handbrake.fr/mirror/%{name}-%{version}.tar.bz2 +Source1: https://github.com/HandBrake/HandBrake/releases/download/%{version}/%{nam... +# import from https://handbrake.fr/openpgp.php or https://github.com/HandBrake/HandBrake/wiki/OpenPGP +# gpg2 --export --export-options export-minimal 1629C061B3DDE7EB4AE34B81021DB8B44E4A8645 > gpg-keyring-1629C061B3DDE7EB4AE34B81021DB8B44E4A8645.gpg +Source2: gpg-keyring-1629C061B3DDE7EB4AE34B81021DB8B44E4A8645.gpg +BuildRequires: gnupg2 %else Source0: https://github.com/%{name}/%{name}/archive/%{commit0}.tar.gz#/%{name}-%{s... %endif @@ -119,6 +124,9 @@ protection. This package contains the main program with a graphical interface. %prep +%if 0%{?tag:1} +gpgv2 --keyring %{S:2} %{S:1} %{S:0} +%endif %setup -q %{!?tag:-n %{name}-%{commit0}} %patch0 -p1 %if 0%{?fedora} <= 25 @@ -230,6 +238,7 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || : - update commit id to match 1.0.7 release - drop redundant Provides/Obsoletes - switch to a source URL that works with spectool/curl +- add GPG signature and verify it in prep * Sat Apr 29 2017 Leigh Scott <leigh123linux(a)googlemail.com&gt; - 1.0.7-3 - Rebuild for ffmpeg and x265 update diff --git a/gpg-keyring-1629C061B3DDE7EB4AE34B81021DB8B44E4A8645.gpg b/gpg-keyring-1629C061B3DDE7EB4AE34B81021DB8B44E4A8645.gpg new file mode 100644 index 0000000..d845bd3 Binary files /dev/null and b/gpg-keyring-1629C061B3DDE7EB4AE34B81021DB8B44E4A8645.gpg differ diff --git a/sources b/sources index a3bed3a..893693d 100644 --- a/sources +++ b/sources @@ -1 +1,2 @@ bf39fcc56a82ccca32a9faac8fa633f5 HandBrake-1.0.7.tar.bz2 +116cb450ac21b8ff6ccf55a72160ae35 HandBrake-1.0.7.tar.bz2.sig