Accepting request 143914 from home:sbrabec:gpg-offline-verify

Verify GPG signature: Perform build-time offline GPG verification.
Please verify that included keyring matches your needs.
For manipulation with the offline keyring, please use gpg-offline tool from openSUSE:Factory, devel-tools-building or Base:System.
See the man page and/or /usr/share/doc/packages/gpg-offline/PACKAGING.HOWTO.

If you need to build your package for older products and don't want to mess spec file with ifs, please follow PACKAGING.HOWTO:
you can link or aggregate gpg-offline from
devel:tools:building or use following trick with "osc meta prjconf":

--- Cut here ----
%if 0%{?suse_version} <= 1220
Substitute: gpg-offline
%endif

Macros:
%gpg_verify(dnf) \
%if 0%{?suse_version} > 1220\
echo "WARNING: Using %%gpg_verify macro from prjconf, not from gpg-offline package."\
gpg-offline --directory="%{-d:%{-d*}}%{!-d:%{_sourcedir}}" --package="%{-n:%{-n*}}%{!-n:%{name}}""%{-f: %{-f*}}" --verify %{**}\
%else\
echo "WARNING: Dummy prjconf macro. gpg-offline is not available, skipping %{**} GPG signature verification!"\
%endif\
%nil
-----------------

OBS-URL: https://build.opensuse.org/request/show/143914
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/npth?expand=0&rev=5

npth.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Nov 28 20:56:10 CET 2012 - sbrabec@suse.cz
+
+- Verify GPG signature.
+
 -------------------------------------------------------------------
 Tue Sep  4 05:11:40 UTC 2012 - jengelh@inai.de
 

npth.keyring

@@ -0,0 +1,37 @@
+pub   2048R/4F25E3B6 2011-01-12 [expires: 2019-12-31]
+uid                  Werner Koch (dist sig)
+sub   2048R/AC87C71A 2011-01-12 [expires: 2019-12-31]
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.19 (GNU/Linux)
+
+mQENBE0ti4EBCACqGtKlX9jI/enhlBdy2cyQP6Q7JoyxtaG6/ckAKWHYrqFTQk3I
+Ue8TuDrGT742XFncG9PoMBfJDUNltIPgKFn8E9tYQqAOlpSA25bOb30cA2ADkrjg
+jvDAH8cZ+fkIayWtObTxwqLfPivjFxEM//IdShFFVQj+QHmXYBJggWyEIil8Bje7
+KRw6B5ucs4qSzp5VH4CqDr9PDnLD8lBGHk0x8jpwh4V/yEODJKATY0Vj00793L8u
+qA35ZiyczUvvJSLYvf7STO943GswkxdAfqxXbYifiK2gjE/7SAmB+2jFxsonUDOB
+1BAY5s3FKqrkaxZr3BBjeuGGoCuiSX/cXRIhABEBAAG0Fldlcm5lciBLb2NoIChk
+aXN0IHNpZymJAT4EEwECACgFAk0ti4ECGwMFCRDdnwIGCwkIBwMCBhUIAgkKCwQW
+AgMBAh4BAheAAAoJECSbOdJPJeO2PlMIAJxPtFXf5yozPpFjRbSkSdjsk9eru05s
+hKZOAKw3RUePTU80SRLPdg4AH+vkm1JMWFFpwvHlgfxqnE9rp13o7L/4UwNUwqH8
+5zCwu7SHz9cX3d4UUwzcP6qQP4BQEH9/xlpQS9eTK9b2RMyggqwd/J8mxjvoWzL8
+Klf/wl6jXHn/yP92xG9/YA86lNOL1N3/PhlZzLuJ6bdD9WzsEp/+kh3UDfjkIrOc
+WkqwupB+d01R4bHPu9tvXy8Xut8Sok2zku2xVkEOsV2TXHbwuHO2AGC5pWDX6wgC
+E4F5XeCB/0ovao2/bk22w1TxzP6PMxo6sLkmaF6D0frhM2bl4C/uSsq5AQ0ETS2L
+gQEIAKHwucgbaRj0V7Ht0FnM6RmbqwZ7IFV2lR+YN1gkZaWRRCaJoPEZFKhhPEBX
+1bDVwr/iTPaPPEtpi7oQoHk65yeLrhtOmXXpNVkV/5WQjAJIrWn+JQ3z/ZejxHUL
+hzKsGg5FC6pRYcEyzRXHtv4BO9kBIKNVirZjEkQG4BnIrQgl6e2YFa47GNMqcQH7
+nJdwG1cGQOZOIDQQM41gBzwoSrStMA6DjHkukFegKfcSbSLArBtYNAwTwmW7RqOM
+EJwlo0+NYx2Yn75x66bYwdlsP0FLOgez/O/IxoPRxXr0l4e+uj6dFHqvBi04dx6J
+sPmXEyeAyLiCWSh7Rwq8uIhBUBUAEQEAAYicBBABAgAGBQJNLY0EAAoJEFO2INAc
+4MYwRk8EAIuasyOnCbJW8jpfk3g2VZy1dBZj7g4PHaI70K1Qz8X3piI8WWaDCwlT
+PJcvAAtiT6yGHzdONAt+N7GiHNLU7TsMJlTLsuxv1HsdtgnVh/9BwTKRuIBbjrkJ
+lvUEA4xHYdQ4MFNoAFqJ1+eGZTMm1rLPtjQopEcDH5VVLqR+ewWriQElBBgBAgAP
+BQJNLYuBAhsgBQkQ3Z8CAAoJECSbOdJPJeO2uxIIAJE2B8aQPQ6o6LBijX/4rJae
+tAu6xW9Jg7DyE3rqB5TcE7yJDQqjL6bRApjWRaNofB7CmDxl5tjgTawds0gL1KnK
+LLPb2wAnaKe9/j/gx6lOCnE2LDj5ebKQKQ3UB9WG8xNBczNFs7lnBG0+mOwyvWPm
+9fWzpTf9HFIAi2kCQK7UYZNM4fSvXY5yFz+6b5AYDI7pZSP8iJnUxfu2hdbRIKjw
+NKXzPlDsqYlYXpNAsrUuS7hshUbUe7CjX/RYdza8Jp3kHEeOCjLxOwotOa9hBla2
+eNa9AZXZQ4AFhZxpy61ldBDY88IhjsuWm5L/jkJdZtPlj6bFjfLt1vPhoX7y7II=
+=Di5x
+-----END PGP PUBLIC KEY BLOCK-----

npth.spec

@@ -29,9 +29,11 @@ Url:            http://gnupg.org/
 #Git-Clone:	git://git.gnupg.org/npth
 Source:         %name-%version.tar.bz2
 Source2:        %name-%version.tar.bz2.sig
+Source4:        %name.keyring
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 #BuildRequires:	autoconf >= 2.67, automake >= 1.11
 #BuildRequires:	libtool >= 2.2.6
+BuildRequires:  gpg-offline
 
 %description
 nPth is a non-preemptive threads implementation using an API very
@@ -61,6 +63,7 @@ based on the system's standard threads implementation. Thus, nPth
 allows the use of libraries which are not compatible to GNU Pth.
 
 %prep
+%gpg_verify %{S:2}
 %setup -q
 
 %build