Accepting request 932751 from home:AndreasStieger:branches:Java:packages

- add upstream signing key and verify source signature

OBS-URL: https://build.opensuse.org/request/show/932751
OBS-URL: https://build.opensuse.org/package/show/Java:packages/maven?expand=0&rev=32

apache-maven-3.8.3-src.tar.gz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iQEcBAABCgAGBQJhUg5WAAoJEBoqHJS96JaIRiYH/idQfMFY5+gd2YbIzvG5Rtq2
+asq+nhaJjXX7dY9O3rkjQ8/kufBnF6ebPxDaENGZOYj9N3VSWsQ81VgPMpcVMESd
+FYcMorcN9erbiHSuH17th8y341a9YjmxuhiYZzGRCg7qT6HQfTgw/Ja4TKspBt5A
+hbGZbc5eWGwHkfjBxPgmf57Vppj+kYej0eXmCUJoPPSzWLlh+hsIa1CXIGF68S8J
+jK4QRw6X9KORZvRQUpfRxyRxFyoYXT3w1JdUPIz4AF546hRZZuWEqBakThYgSaWD
+uyFJj4L9euTMg0kUB0R+6MRJ0zfzxDYuyV7GFgos5U8Pw/1VGr45x8L7NN2wm8Y=
+=tv0x
+-----END PGP SIGNATURE-----

maven.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Sun Nov 21 08:49:59 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- add upstream signing key and verify source signature
+
 -------------------------------------------------------------------
 Tue Sep 14 14:44:11 UTC 2021 - Stefan Schubert <schubi@suse.de>
 

maven.spec

@@ -37,6 +37,8 @@ URL:            https://maven.apache.org/
 Source0:        http://archive.apache.org/dist/%{name}/%{name}-3/%{version}/source/apache-%{name}-%{version}-src.tar.gz
 Source1:        maven-bash-completion
 Source2:        mvn.1
+Source3:        http://archive.apache.org/dist/%{name}/%{name}-3/%{version}/source/apache-%{name}-%{version}-src.tar.gz.asc
+Source4:        https://downloads.apache.org/maven/KEYS#/%{name}.keyring
 Source10:       apache-%{name}-%{version}-build.tar.xz
 Patch1:         0001-Adapt-mvn-script.patch
 # Downstream-specific, avoids dependency on logback
@@ -296,7 +298,7 @@ for i in \
 done
 
 %install
-%mvn_install
+%{mvn_install}
 %fdupes %{buildroot}%{_javadocdir}
 
 install -d -m 755 %{buildroot}%{homedir}/boot