Accepting request 172929 from home:AndreasStieger:branches:devel:tools:scm:svn

- add gpg signature verification of source tarball

OBS-URL: https://build.opensuse.org/request/show/172929
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=114

subversion-1.7.9.tar.bz2.asc

@@ -0,0 +1,57 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
+Comment: GPGTools - http://gpgtools.org
+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+=54FV
+-----END PGP SIGNATURE-----
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.13 (OpenBSD)
+
+iQEcBAABAgAGBQJRWwOZAAoJEE99uqmaWblzyrAH/jlEAjUuydB/X8ORAQS1QbrH
+8i/D9i72HXpDIVOXgc03wZa+h1QJvgmRH2KyRY6iMi+qds1EYBrZ873GrULL9Sty
+XdoUWcD/Ece7vODRvVwIkacMKbOWGSCWPePOQzxIx5zik2TCoEd8vD3iowVJrr7M
+D5hfpaJJiBS2jyptgJfwK5mD8uI4QpOAWs+iYkY7GLmubQqEwgp4wsW5n2B2DpqY
+1zkAA5PcJDwu3f3cg7cx3AkJIzIasI9SLadJarChI4oN75Dhs34Ki8dUQVfevLpm
+K5ZSMuOxnkizKOgxU3zjzZsrriX90Nft2jp+HCURi6tBtrXc5eqYYeArWdWEdZM=
+=Y32W
+-----END PGP SIGNATURE-----
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.11 (GNU/Linux)
+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+=qXb4
+-----END PGP SIGNATURE-----
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+
+iQEcBAABCAAGBQJRW1FEAAoJEHbXiOHtGlmc10QH/RM6xsjVTApbBYeM0T8UFzQX
+gXR0huspMvqBJg/XIGEAiqsAcUeA6UoYjdmbGpZG7JjFnTAS8mPRm6hsyiDOw+zv
+WX6trzh7ZLXRcLEG+Yr+Ed0jKGjxnYNWybfXEfqoDM0llRaJQmV0CkkPYYNHzAU6
+E3/Kht/w1h0c9xP8vAdoaO5x1mxUEpqIf0lWJFp4NfER4ZI+R7rH8qCf2vfMz1sg
+Z9690DF5QEd9gFR0d9dUaPaz9Fi0Ym+p1j+c8BGi117ScebYObbAB8chVfSR2xjc
+6+NVc9YuWJniddCg3Sn6QfSaAX/IRof6Rur7GVE0+5sQNW09YADW4yzReb1tqac=
+=mMno
+-----END PGP SIGNATURE-----

subversion.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Apr 12 20:28:50 UTC 2013 - andreas.stieger@gmx.de
+
+- add gpg signature verification of source tarball
+
 -------------------------------------------------------------------
 Sun Apr  7 20:15:46 UTC 2013 - andreas.stieger@gmx.de
 

subversion.spec

@@ -140,6 +140,12 @@ Source12:       subversion.sysconfig.svnserve.remoteaccess
 Source13:       subversion.xinetd.svnserve
 Source42:       subversion.svngrep.sh
 Source43:       subversion.svndiff.sh
+# https://people.apache.org/keys/group/subversion.asc
+Source50:       subversion.keyring
+Source51:       https://www.apache.org/dist/subversion/%{name}-%{version}.tar.bz2.asc
+%if 0%{?suse_version} >= 1230
+BuildRequires:  gpg-offline
+%endif
 %if %with_intree_swig
 # http://ovh.dl.sourceforge.net/project/swig/swig/swig-%{swig_version}/swig-%{swig_version}.tar.gz
 Source90:       swig-%{swig_version}.tar.bz2
@@ -318,6 +324,7 @@ parameters and keywords for the svn command and other tools.
 %endif # with_bashcomp
 
 %prep
+%{?gpg_verify: %gpg_verify %{S:51}}
 %if %with_intree_swig
 %setup -q -n subversion-%{version} -a 4 -b 90
 %else