Commit Graph

1 Commits

Author SHA1 Message Date
Todd Zullinger
0a023cb020 verify upstream signatures in %prep, unless bootstrapping
Per the guidelines¹, verify upstream signatures, unless we are in
bootstrap mode.

The fingerprints of the keys contained in signature_key.asc were checked
against the upstream page (https://gnupg.org/signature_key.html).

¹ https://docs.fedoraproject.org/en-US/packaging-guidelines/#_source_file_verification
2022-12-20 21:03:24 -05:00