From c62ddea769eacff3198aa41015a9cb46677a43449088ddb4644cbe28fb97f5bb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lars=20M=C3=BCller?= <lmuelle@suse.com>
Date: Fri, 6 Dec 2013 13:05:14 +0000
Subject: [PATCH] Verify source tar ball gpg signature.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/talloc?expand=0&rev=23
---
 samba-library-distribution-key.asc | 56 ++++++++++++++++++++++++++++++
 talloc-2.0.8.tar.asc               | 11 ++++++
 talloc.changes                     |  5 +++
 talloc.spec                        | 10 ++++++
 4 files changed, 82 insertions(+)
 create mode 100644 samba-library-distribution-key.asc
 create mode 100644 talloc-2.0.8.tar.asc

diff --git a/samba-library-distribution-key.asc b/samba-library-distribution-key.asc
new file mode 100644
index 0000000..6b769d6
--- /dev/null
+++ b/samba-library-distribution-key.asc
@@ -0,0 +1,56 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.22 (GNU/Linux)
+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+=Tw7M
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/talloc-2.0.8.tar.asc b/talloc-2.0.8.tar.asc
new file mode 100644
index 0000000..4a5bb41
--- /dev/null
+++ b/talloc-2.0.8.tar.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.11 (GNU/Linux)
+
+iQEcBAABAgAGBQJQuHPjAAoJEEeTkWETCEAlNNEH/18CIfh8JOG0I/ZdhCHLsWB2
+rQGvN9mlVubHsI1zAzNx1LxCYvONpLFbMZr/V0nN8eh+G6zfwuTDhpt8QJ4DnGHE
+eW39idLOXZBIXyE2C2GO19Hvo+GKeEqAATI9EgGAUtIBbKQfO+c7Plcb2F7YgsUN
+BLhg+OLX9GHfSolNHIfJB8zsDIQiWB6cdHHEgV9MvYe5HwhnceC90HT7ZheFP2eD
+HSBnfHUSkA6gKjKlsEqxKZ6txI8J7KcJSrPgeSp1hQpPxa8ZB0YeKJ6l4dbQk2PU
+pOeuMsHKLXlPlViCl2k+T6A9sta8mOEDyXBUG93eFboe6Xb8pisego9FnBNqwh4=
+=tTcE
+-----END PGP SIGNATURE-----
diff --git a/talloc.changes b/talloc.changes
index 02726d9..628a1d6 100644
--- a/talloc.changes
+++ b/talloc.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Dec  6 12:29:33 UTC 2013 - lmuelle@suse.com
+
+- Verify source tar ball gpg signature.
+
 -------------------------------------------------------------------
 Thu Aug 29 12:07:49 UTC 2013 - lmuelle@suse.com
 
diff --git a/talloc.spec b/talloc.spec
index 4b90acc..c82bf8b 100644
--- a/talloc.spec
+++ b/talloc.spec
@@ -27,6 +27,9 @@ Name:           talloc
 BuildRequires:  autoconf
 BuildRequires:  docbook-xsl-stylesheets
 BuildRequires:  doxygen
+%if 0%{?suse_version} > 1220
+BuildRequires:  gpg-offline
+%endif
 BuildRequires:  libxslt
 %if 0%{?suse_version} > 1020
 BuildRequires:  pkg-config
@@ -45,6 +48,8 @@ Summary:        Samba talloc Library
 License:        LGPL-3.0+
 Group:          System/Libraries
 Source:         http://download.samba.org/pub/talloc/talloc-%{version}.tar.gz
+Source1:        http://download.samba.org/pub/talloc/talloc-%{version}.tar.asc
+Source2:        samba-library-distribution-key.asc
 Source4:        baselibs.conf
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
@@ -104,6 +109,11 @@ Libraries and Header Files to Develop Programs with pytalloc Support
 
 
 %prep
+%if 0%{?suse_version} > 1220
+gzip -dc %{SOURCE0} >${RPM_SOURCE_DIR}/%{name}-%{version}.tar
+%{?gpg_verify: %gpg_verify --keyring %{SOURCE2} %{SOURCE1}}
+rm ${RPM_SOURCE_DIR}/%{name}-%{version}.tar
+%endif
 %setup -n talloc-%{version} -q
 
 %build