Add signature verification

OBS-URL: https://build.opensuse.org/package/show/KDE:Frameworks5/plasma5-workspace?expand=0&rev=418

plasma-workspace-5.13.90.tar.xz.sig

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEELR1bBYg1d4fenuIl7JTRj38FmX4FAluanrgACgkQ7JTRj38F
+mX6obAf7BDEhVIUVxFa+WoXFov30N4mVCjsuymDYkjzUM3B5q7MXPMNxyFNdsuCz
+vcJz8t4HC6acK9ZTJ2L+DpBjFuhxUn9hcoed/hVcTNouiFPTeor2zGvJM0y2NUV5
+P36NCN7eNQOOfKmB0RDkVKGrQIhNPTDqAbn+KnNutA3sFDj91vEfV6K+bWq88oxT
+rbqp+ah2EMvoJZomP3fIdmoXVHlA6dTnOL8uTTto1OKPkt6P41lLW86LMKCuqdu+
+FoQ1AS3vnfnSt+4rmrwsISrBQLPc/w/tLabqMB+41DnZzqF312eHccLwhaefVLkA
+FRZ4C2tdm4Z37NL4CJG96gAJt2aVxA==
+=8De6
+-----END PGP SIGNATURE-----

plasma5-workspace.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Sat Sep 15 16:25:30 UTC 2018 - fabian@ritter-vogt.de
+
+- Add tarball signature and keyring containing keys of release managers
+  Jonathan Riddell and Bhushan Shah
+
 -------------------------------------------------------------------
 Thu Sep 13 17:25:03 UTC 2018 - fabian@ritter-vogt.de
 

plasma5-workspace.spec

@@ -34,7 +34,11 @@ License:        GPL-2.0-or-later
 Group:          System/GUI/KDE
 Url:            http://www.kde.org/
 Source:         http://download.kde.org/unstable/plasma/%{version}/plasma-workspace-%{version}.tar.xz
-Source1:        baselibs.conf
+%if %{with lang}
+Source1:        http://download.kde.org/unstable/plasma/%{version}/plasma-workspace-%{version}.tar.xz.sig
+Source2:        plasma.keyring
+%endif
+Source3:        baselibs.conf
 # PATCHES 000-100 and above are from upstream 5.12 branch
 # PATCHES 101-500 are from upstream master/5.13 branch
 # PATCHES 501-??? are PATCH-FIX-OPENSUSE