From f503c81da904a66dead7724d852afb69418346f6 Mon Sep 17 00:00:00 2001
From: Michael Jeanson <mjeanson@efficios.com>
Date: Wed, 24 Jul 2019 17:55:44 -0400
Subject: [PATCH] Add GPG source file verification

---
 .gitignore                                       |   1 +
 babeltrace.spec                                  |  13 ++++++++++---
 ...-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg | Bin 0 -> 2908 bytes
 sources                                          |   1 +
 4 files changed, 12 insertions(+), 3 deletions(-)
 create mode 100644 gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg

diff --git a/.gitignore b/.gitignore
index 1e3e3b3..119a189 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 /babeltrace-1.*.tar.bz2
+/babeltrace-1.5.7.tar.bz2.asc
diff --git a/babeltrace.spec b/babeltrace.spec
index 8efa7ff..eb1fed5 100644
--- a/babeltrace.spec
+++ b/babeltrace.spec
@@ -1,10 +1,13 @@
 Name:           babeltrace
 Version:        1.5.7
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Trace Viewer and Converter, mainly for the Common Trace Format
 License:        MIT and GPLv2
 URL:            https://www.efficios.com/babeltrace
 Source0:        https://www.efficios.com/files/%{name}/%{name}-%{version}.tar.bz2
+Source1:        https://www.efficios.com/files/%{name}/%{name}-%{version}.tar.bz2.asc
+# gpg2 --export --export-options export-minimal 7F49314A26E0DE78427680E05F1B2A0789F12B11 > gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg
+Source2:        gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg
 
 BuildRequires:  bison >= 2.4
 BuildRequires:  flex >= 2.5.35
@@ -15,8 +18,8 @@ BuildRequires:  python3-devel
 BuildRequires:  swig >= 2.0
 BuildRequires:  elfutils-devel >= 0.154
 BuildRequires:  autoconf automake libtool
-# For check
-BuildRequires:  perl-Test-Harness
+BuildRequires:  gnupg2
+
 Requires:       lib%{name}%{?_isa} = %{version}-%{release}
 
 %description
@@ -58,6 +61,7 @@ to/from another trace format.
 
 
 %prep
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 %setup -q
 
 %build
@@ -110,6 +114,9 @@ rm -f %{buildroot}/%{_pkgdocdir}/std-ext-lib.txt
 
 
 %changelog
+* Wed Jul 24 2019 Michael Jeanson <mjeanson@efficios.com> - 1.5.7-2
+- Add GPG source file verification
+
 * Wed Jul 24 2019 Michael Jeanson <mjeanson@efficios.com> - 1.5.7-1
 - New upstream release
 
diff --git a/gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg b/gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg
new file mode 100644
index 0000000000000000000000000000000000000000..d020f1d50fd8c29303ad1594009c7f7a19113cb0
GIT binary patch
literal 2908
zcmb8xXE+;*9>;M>6hULPMr>-wh_+%x%u*w2#i~uju4+-LsM;!4QG3s-svUdJL#kRq
zZH=0>4o6Ro+k5W4&%Muc-`xB5_xkhvzyD0&RZ7Dh)C_=;qVhznzV(x;JU8>j;%UPj
z@f~2MVXLbhrKz+0pkG;IN|N$jgW{1!*6Oiic=RS+v&k#`UeL&7W|_Xj%Y$S{W5m^3
zAFaZUfDF<&yNwd;M?x#zutN#D%%AwffK$9mSwPy#5ZP>7gjxiXmoh3xJ}ap%OWDLF
zjx`^rc5kc`o+`mg1NKSQyqyI?5?<ZG-2M;yfnOO#^A{2Lw+=dnri;A6L#E?<afy9l
z`^(RS0LzO@rJQRWrrfHX(IO@vC*ZOZv_o^XLrCYF6pxAs%*|sQ($$KM6U2Gk$e&E)
zq*>Iud~_q&>jMw}MT}hItU#}NLtUr~5m@7A&zi*4>(NhR;X=ioiRbs7{>J^SBL7Rv
z<3Aovvj;Oz?+TWQZNu)vJSAeLeLaf0Y4g#_q6RIt+OY>egXfoF{D1?iipi}R?(x^?
zIyP@h1cvO<cWxRvJEr0!bAD~6_fcx~)QQT6vp(2{;oSkDXf=>9ABsCZzJ>Lp&hd}=
zZQy<~OtfSUXTN}EWc3~&orh(=v4pq!MA_C}=)#=R*K5@!TDsdWY@^vH&TY|w86VPE
z=Kzfgg8kQiGXt4Ym#$J8?i#b`W7Am!2L+vZej`+CW<CZjxwl@zJ6!oD-2{e}y;gOM
zvbYUY+bx5ltEH$^LN^=F-$xgkYdXS`yWDP5Faan44RGDQO5eUpFE=cowu7gGuQ%4g
zj}PgN^~L_0q;UV5RB>JoZk|$354=#ZKr>1f0FXiz$O)pR1Jh80fB>rNG(a#d9VIIe
z1OV~?fNWu`{FI?Oa9!c$#V6|iVas-$;?%JR5=>Ws*4nNVSHKM1NjE5H!Hoafs}&f|
zX!(wCC~~c*@VU6%&RhS$MF}<t{n_(%%1b86dxh;41<?XxJh5o5n01XU{*#_q%CfaA
z#Kh~FR0ckFk8TLD$Ga=#39Y{0l@pABULqG!W*GtF=s~32we_^vW(i65Nz*aO2`GQ`
z%{_~m5F04c(_Lav);H~>Sr0AN8GW$82t4#J?4%QPEh~`BsxW$nN=JL|U{24yY;5#*
zK6|4NE!m`_-A#of&5g_E?B6$XhpKJqRU8P?qCWM;{xB#z>bh-U5Q&A}wToiB#93b)
z53B|^-Lq$aXL+nyd4%+xS9jvViQ3{b!^NYSNL;lC+5PBGKfbb>wwUdGBhAm2YSd?&
zdmt7?+UIIAY2cAQh6XlCW(;R-EN{q1J7rSj&y8S8s_T|Zb&ouV&}|WYOI^jeUB0we
zJbk2KCI3y|pGEva_rIwFv~z`li!I4&C^_PReM;L)5it?uE@vC)_ZIAXzb2B&=7veU
zMb{Lkz7&8|AEu=*W2WWU@U-5%O_=+9X_0MPc}wRY|D|R?2$V-?>}fYL&E*KcMBfy`
z^$2YEsi|eD*(`%ILJc~T`TZkqKV*)|XgDb5qC)K^4{E^(BX-%<rH<-NscFk0%!A=8
z2$4j1oPgo_N<y0HgW|*QJyA!#Nw+PAb4!A9bib&nKrv`RwRY<;MaqU-|D#2$i;J6+
z+k;2{<cRr;qslLiRR7@ke`&;>{kO*bxL@b79XW8;?@AASrPttDU7+5nYp0>%SQ#`+
zNJ!hYyw*j&YTa$yAFoHjJ7#qKJa138xor&Qid&tr8zXVUTfm*XF52m9o3HM9p78)z
z2VM$e@?vdt*&bUgq7xU(za4(9?c`;8$QaB#KL`j%*L7ff<gOfX$d^8Ah+r=lda01l
ze4y_*H1oD$I5BKao-VZwH@<b|tMBEqcVuDwrj@c#^Za#kFTJTh(M5A9bPFAj-O6`#
zUeI$Y`Oa20;gx}^L+9`Kn1!OQcSQ<dNLHRk6|skJ8d2huZh+h0xk#=edyVP#tcA;N
zYmj~1nzocrIrRVN7ve<D_ve}`*R8bMw56tvg<dPX5np1NIM?`|%!ptqem38=DD?#@
z*ZKHPFitpL=d;<vhdGjnU1<hW*=R$q9peLW?^2m8g2)-FCV^yct*3QrnajqKIb>2W
z<>(r;88=66XNO&4WTcO_xWKJeLQWGAPqSZSGft#v)@UyfhZctLOF;M#>Pv0BiOM{y
zn~Fv>+h{aTt7&=mkNTT#^xg}NO3sHfq4XRU;nq$Y^zf=FAKtyZJ@@)m^W_9*43i8-
zD<g|Xt=4U5c+MRtMMnTzPvJ2jgAzL$_#N`zy3QSI%cghoOQ$mE(UOdgmlk{cj;Yy4
z{oK-THaV6*f9be!hv8}S;19yTOWDFYR6p=!foVotuI|T*mM;VJs-1BKZJ2aw_|eq2
z@NiUTRAsP4#|MbFHI`2UwKd_PU|$)~EM<ZxthPlnrDWbB1g%R1Z9lhIiDRsx=th$u
z2r-cJTUCnt%FT+pFp9IVQ^@sEu}LoegP;Np{rTi~t~^{L1Tuz4Z}|4G<9ENy`-)X1
zKC^7%yrtEihcDdPV<XHJ=wn07%-`g|mT0ARCpQhp?(i9x7Mp$lxr9Bje_JS`{X(%m
zx5=zAE+*LCBIUw66+bF0**x$mWUGU=YtSf>;@Dqtf5O$%Bq$K!qyOuy<+(`iTwls?
zP#Rdx9LX|~JyuX@(H3_Yf_viyKT3R+CWj#v&-ku|%bdosVFIci+d+o0TE=g)ZpbUS
zzgKZBE(-6;5KisGL^~Y^nk|cjKKIX7SU#<jXi6aLEj+R2dKEgsPklT4FzjNA3Obx=
zSA3nhUSN+P8$!zm{!(<gKq6<_=srezCi#k1G1}n)Aac4hV&{*@6^bG&`oM)GQJvAN
zV`8-3nK!}y22kf(o({B4#F4^rVDHu;E51BT*DDwDJc4kVzHp|`alW}cbx7LqzL9$x
zR7_w}N-2zV%;goxmxE7a*Og)&wPXPo_?ZvYbWSOPottYcPvvti-K!XysN03O1j-NR
zWI{GHEbgpmS+wJK|0-oHke8DESN6bHfPa6WfSmOI*)NuShD#TilhD`L@6E#>b`NNI
zFO{DTeJ-m~b$jFUnxB|fPLGeB{n>kDI1S7SF&mvEd;a{*Wk?;n21<drMXkf?&1OCn
z?Zjz~(*y!?%(MHOmtjKhj7K~4cIDjsrolMsx&odCZ!Xla4>zS1@=sB$B>I7Pcl(O*
zCl*f{->B{R8mrGK&=YktjTGc$B+sJNV{i3`auq@zUSW;5)gI)f77OGF?KhE4No~E{
z=*Z00*R0rQx;@VW)z5;vAzXT;8V|l3yeRG&+_uy%|CVKrh?uZCs7bk<Gp#v&czG*d
zpCSs9ceL#b&fzzOB%GrkqT_o<4;C(nXQ3kyHaf=k?mP>ftUarTCZ#1h&hh=tWGJNn
z=DkIhBUYAE)u5g}X>lm6!r<~&9(v~P@HOp_FKXkklHV79mYJYbj^}!vZAqf}$B8ek
zR$R;2^BvL|WOF-73(VKvjpi29z?3Z`1BS{c8L8C01;=mAP)dRH2D8Lt)bG!J<sY!+
zy-F@uNU~TVaY_#s8khL2Tu25JkSA!f$?I?HIR?z^6ys$2%H0h`#d5uF=*aG!I8S!L
z^W|@Fj<QSnA!Ng!DC`pP6{2%%xXq7gU0tIRvB*lqt&|$^CtRTLG@4_d_l-s%arrnA
jB)iMqV5`LAbgwsbRQcc4bZ9I$Xq;v}iKbAO@x;FYVGvn>

literal 0
HcmV?d00001

diff --git a/sources b/sources
index 40db9ba..def08b6 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
+SHA512 (babeltrace-1.5.7.tar.bz2.asc) = dbe1ff19cda21a29d65c1b7af2f978de60b93d45884c5a290a2ef373e7aba044851aa943312088db89e4bab0a75b2201844aef619f57a593e761fbebbdcf62d3
 SHA512 (babeltrace-1.5.7.tar.bz2) = 1cab84b63fd0935574cca8d4c70302a917776e83e738e73aa3ce4070c6d3279556ab665285c932d1b2159115a58cade7cfa9b0416b4a2807e1ce11bb9c7ea8cb