diff --git a/mc.changes b/mc.changes
index 2507995..05e2d2c 100644
--- a/mc.changes
+++ b/mc.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Nov  9 12:14:47 UTC 2015 - astieger@suse.com
+
+- verify the sha256 hash during build
+
 -------------------------------------------------------------------
 Mon Nov  9 12:05:44 CET 2015 - pth@suse.de
 
diff --git a/mc.spec b/mc.spec
index b792fa8..f34c05e 100644
--- a/mc.spec
+++ b/mc.spec
@@ -31,7 +31,7 @@ Source2:        %{name}.desktop
 Source3:        %{name}.png
 Source4:        cmake.syntax
 Source5:        mc-rpmlintrc
-Source6:        %{name}-%{version}.sha256
+Source6:        http://ftp.midnight-commander.org/%{name}-%{version}.sha256
 Patch0:         mc-fix_lib_search_path.patch
 Patch61:        mc-extd-misc.patch
 Patch62:        mc-extd-video.patch
@@ -107,6 +107,7 @@ isoinfo (from mkisofs) or xorriso for the iso:// extension.
 
 %lang_package
 %prep
+echo "`grep %{name}-%{version}.tar.xz %{SOURCE6} | head -n1 | cut -c1-64`  %{SOURCE0}" | sha256sum -c
 %setup -q
 %patch0
 %patch61