Add signature verification

OBS-URL: https://build.opensuse.org/package/show/KDE:Frameworks5/milou5?expand=0&rev=182

milou-5.13.90.tar.xz.sig

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEELR1bBYg1d4fenuIl7JTRj38FmX4FAlualo4ACgkQ7JTRj38F
+mX5ALwgAmBlT/txJI33OuyGusNWtgFoy1cOZiJnwkNUMzuXT1ZhCq2tXmhiM6D3N
+4KB28sHkFjFeVqHwHKNzi4FOm9d0ryeI9Aoo1E/XwvRazI/1/c7lJNUvNJv8eHH4
+6Z9TOSNlh2oqYTYOfZJURzoBjjE0zadslCo2VEXm4ecwNjBxwh0hRQxkV8j1UdXH
+kixiHB4Ur+++M948C+HdIz18iMjbrfDrJRYRqmRZCsbtVtATycpCp8r80an7BW51
+dW/LpdwCYDqk13s3sFC1WC6yTdRWO8mOANvVZYzrTzW+3xPPpjcvY1fIpZsWJnuT
+NbGQWyNUYiqiIh7ooIgw62qbNX/55g==
+=imrb
+-----END PGP SIGNATURE-----

milou5.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Sat Sep 15 16:25:29 UTC 2018 - fabian@ritter-vogt.de
+
+- Add tarball signature and keyring containing keys of release managers
+  Jonathan Riddell and Bhushan Shah
+
 -------------------------------------------------------------------
 Thu Sep 13 17:25:02 UTC 2018 - fabian@ritter-vogt.de
 

milou5.spec

@@ -25,6 +25,10 @@ License:        GPL-2.0-or-later AND LGPL-2.1-or-later
 Group:          System/GUI/KDE
 Url:            https://projects.kde.org/milou
 Source:         http://download.kde.org/unstable/plasma/%{version}/milou-%{version}.tar.xz
+%if %{with lang}
+Source1:        http://download.kde.org/unstable/plasma/%{version}/milou-%{version}.tar.xz.sig
+Source2:        plasma.keyring
+%endif
 BuildRequires:  extra-cmake-modules >= 1.2.0
 BuildRequires:  fdupes
 BuildRequires:  kf5-filesystem