From 7fc7652cf7cf2075c098f077495aea8b5132f177ba5889c827301021f8223ff9 Mon Sep 17 00:00:00 2001
From: Andreas Stieger <andreas.stieger@gmx.de>
Date: Sun, 22 May 2022 08:15:49 +0000
Subject: [PATCH] key

OBS-URL: https://build.opensuse.org/package/show/security:privacy/rnp?expand=0&rev=10
---
 rnp-0.16.0.tar.gz.asc |  7 +++++++
 rnp.changes           |  5 +++++
 rnp.keyring           | 16 ++++++++++++++++
 rnp.spec              |  4 +++-
 4 files changed, 31 insertions(+), 1 deletion(-)
 create mode 100644 rnp-0.16.0.tar.gz.asc
 create mode 100644 rnp.keyring

diff --git a/rnp-0.16.0.tar.gz.asc b/rnp-0.16.0.tar.gz.asc
new file mode 100644
index 0000000..76069be
--- /dev/null
+++ b/rnp-0.16.0.tar.gz.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABYIAB0WIQSoRaW9YiVW6J13Y7XrBtFpa+xMkAUCYfIfqwAKCRDrBtFpa+xM
+kJVWAQDvU2GeC7wJ5tAa/EWVrObYhCZpLnCYxZDS5vswEiHlegD+Kd5H9JTec+wt
+4a43MMASYoCsOxUu4HtiWiipWDLweA4=
+=ZiFk
+-----END PGP SIGNATURE-----
diff --git a/rnp.changes b/rnp.changes
index d8ae7f4..b6a4a0c 100644
--- a/rnp.changes
+++ b/rnp.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Sun May 22 08:14:29 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- add upstream signing key and verify source signature
+
 -------------------------------------------------------------------
 Sun Feb 13 18:12:53 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
 
diff --git a/rnp.keyring b/rnp.keyring
new file mode 100644
index 0000000..ad4ef1f
--- /dev/null
+++ b/rnp.keyring
@@ -0,0 +1,16 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mDMEYOUN0RYJKwYBBAHaRw8BAQdABYQzPZjgIFtFSj3p2cG+vla9Eovw95Z1nkMd
+IRvMUZy0LFJOUEdQIFJlbGVhc2UgU2lnbmluZyBLZXkgPHJucGdwQHJpYm9zZS5j
+b20+iJYEExYIAD4WIQS+26BcHm7i37S6cuHsXVIK2QpyYgUCYOUN0QIbAQUJXfwP
+AAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRDsXVIK2QpyYkSeAP4iQq7ixj2+
+7IsbJ/RAgxYm+3Ey/T9lbitfN9a3HNKYTAEAuenJsCf83pbQfqMUp7bILPunM54C
+4DQbneRZATCKLgm4MwRg6D1oFgkrBgEEAdpHDwEBB0CeBN35HlkeCGgBAX3gVBc7
+uBCUK7+nnmjmFPsDPcRdJYj1BBgWCAAmFiEEvtugXB5u4t+0unLh7F1SCtkKcmIF
+AmDoPWgCGwIFCQHhM4AAgQkQ7F1SCtkKcmJ2IAQZFggAHRYhBKhFpb1iJVbonXdj
+tesG0Wlr7EyQBQJg6D1oAAoJEOsG0Wlr7EyQ6dwBAJLkEeeMRD6Qut/YQx924+uw
+swLdLGfvwbwe27A42zDeAP49eA1TD/ZCfDkdyQzZFlVIN+Y/pGrQD5ajMa9p1P8v
+DevrAP98h60ca6dqMYI0VNtgLezPwmivFWbX7NwwxCCMNVHmJwD/SIw48ygsOf/B
+nCJO/JGNfMoqoaF618qCv49iCQuiswY=
+=OhQt
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/rnp.spec b/rnp.spec
index 40a01b9..c938b27 100644
--- a/rnp.spec
+++ b/rnp.spec
@@ -24,7 +24,9 @@ Release:        0
 Summary:        OpenPGP implementation fully compliant with RFC 4880
 License:        Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause
 URL:            https://www.rnpgp.com/
-Source:         https://github.com/rnpgp/rnp/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+Source:         https://github.com/rnpgp/rnp/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+Source2:        https://github.com/rnpgp/rnp/releases/download/v%{version}/v%{version}.tar.gz.asc#/%{name}-%{version}.tar.gz.asc
+Source3:        https://www.rnpgp.org/openpgp_keys/BEDBA05C1E6EE2DFB4BA72E1EC5D520AD90A7262-A845A5BD622556E89D7763B5EB06D1696BEC4C90.asc#/%{name}.keyring
 BuildRequires:  cmake >= 3.14
 BuildRequires:  gcc-c++
 # https://github.com/rnpgp/rnp/issues/1579