Accepting request 143940 from home:sbrabec:gpg-offline-verify

Verify GPG signature: Perform build-time offline GPG verification.
Please verify that included keyring matches your needs.
For manipulation with the offline keyring, please use gpg-offline tool from openSUSE:Factory, devel-tools-building or Base:System.
See the man page and/or /usr/share/doc/packages/gpg-offline/PACKAGING.HOWTO.

If you need to build your package for older products and don't want to mess spec file with ifs, please follow PACKAGING.HOWTO:
you can link or aggregate gpg-offline from
devel:tools:building or use following trick with "osc meta prjconf":

--- Cut here ----
%if 0%{?suse_version} <= 1220
Substitute: gpg-offline
%endif

Macros:
%gpg_verify(dnf) \
%if 0%{?suse_version} > 1220\
echo "WARNING: Using %%gpg_verify macro from prjconf, not from gpg-offline package."\
gpg-offline --directory="%{-d:%{-d*}}%{!-d:%{_sourcedir}}" --package="%{-n:%{-n*}}%{!-n:%{name}}""%{-f: %{-f*}}" --verify %{**}\
%else\
echo "WARNING: Dummy prjconf macro. gpg-offline is not available, skipping %{**} GPG signature verification!"\
%endif\
%nil
-----------------

OBS-URL: https://build.opensuse.org/request/show/143940
OBS-URL: https://build.opensuse.org/package/show/X11:terminals/xterm?expand=0&rev=58

xterm.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Nov 27 20:03:03 CET 2012 - sbrabec@suse.cz
+
+- Verify GPG signatures.
+
 -------------------------------------------------------------------
 Mon Nov 26 15:00:14 UTC 2012 - meissner@suse.com
 

xterm.keyring

@@ -0,0 +1,28 @@
+pub   1024D/F7E48EDB 2004-01-05
+uid                  Thomas Dickey <dickey@invisible-island.net>
+sub   1024g/E4374AE1 2004-01-05
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.19 (GNU/Linux)
+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VWbi
+-----END PGP PUBLIC KEY BLOCK-----

xterm.spec

@@ -21,6 +21,7 @@ Name:           xterm
 BuildRequires:  fontpackages-devel
 %endif
 BuildRequires:  freetype2-devel
+BuildRequires:  gpg-offline
 BuildRequires:  ncurses-devel
 BuildRequires:  update-desktop-files
 %if 0%{?suse_version} > 1130
@@ -62,6 +63,7 @@ Source6:        terminal.png
 %define vttest_version 20120506
 Source7:        ftp://invisible-island.net/vttest/vttest-%vttest_version.tgz
 Source10:       ftp://invisible-island.net/vttest/vttest-%vttest_version.tgz.asc
+Source11:       %name.keyring
 Source8:        20x20ja.bdf.bz2
 Source9:        20x20ko.bdf.bz2
 # Snoop for the escape sequence assignment of the keypad
@@ -82,6 +84,7 @@ BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 This package contains the basic X.Org terminal program.
 
 %prep
+%gpg_verify %{S:2} %{S:10}
 %setup -q -b7
 %patch1 -p1 -b .xterm-settings
 %patch2 -p0 -b .xterm-sigwinch