Accepting request 159423 from home:msmeissn:branches:Printing

- use URLs in Source tags
- added gpg signature checking to %prep.

OBS-URL: https://build.opensuse.org/request/show/159423
OBS-URL: https://build.opensuse.org/package/show/Printing/hplip?expand=0&rev=69

hplip.spec

@@ -69,7 +69,9 @@ Url:            http://hplipopensource.com
 # For example: /usr/bin/gpg --keyserver pgp.mit.edu --recv-keys 0xA59047B9
 #              /usr/bin/gpg --verify hplip-3.13.3.tar.gz.asc hplip-3.13.3.tar.gz
 # must result: Good signature from "HPLIP (HP Linux Imaging and Printing) <hplip@hp.com>"
-Source0:        hplip-%{version}.tar.gz
+Source0:        http://prdownloads.sourceforge.net/hplip/hplip-%{version}.tar.gz
+Source1:        http://prdownloads.sourceforge.net/hplip/hplip-%{version}.tar.gz.asc
+Source2:        hplip.keyring
 # Patch0...Patch9 is for patches from HP:
 # Patch10...Patch99 is for Suse patches for the sources from HP:
 # Patch10 fixes "... is used uninitialized ..." warnings:
@@ -170,6 +172,11 @@ Obsoletes:      hplip3 < 3.9.5
 # Skip testing devel dependencies required by libtool .la files by the following comment:
 # skip-check-libtool-deps
 
+# starting with 12.3 we can do buildtime gpg signature checking of the tarball.
+%if 0%{?suse_version} > 1220
+BuildRequires:  gpg-offline
+%endif
+
 %description
 The Hewlett-Packard Linux Imaging and Printing project (HPLIP) provides
 a unified single and multifunction connectivity solution for HP
@@ -308,6 +315,10 @@ with the scan drivers in HPLIP for standard HP all-in-one printers.
 
 
 %prep
+# first thing is to verify the GPG signed tarball, starting with openSUSE 12.3.
+%if 0%{?suse_version} > 1220
+%gpg_verify %{S:1}
+%endif
 # Be quiet when unpacking:
 %setup -q
 # Patch10 fix-uninitialized-variables.diff