Always check the signature of the tarball

.gitignore

@@ -20,3 +20,4 @@
 /talloc-2.1.16.tar.gz
 /talloc-2.2.0.tar.gz
 /talloc-2.3.0.tar.gz
+/talloc-2.3.0.tar.asc

libtalloc.spec

@@ -8,7 +8,10 @@ Release: 1%{?dist}
 Summary: The talloc library
 License: LGPLv3+
 URL: https://talloc.samba.org/
-Source: https://www.samba.org/ftp/talloc/talloc-%{version}.tar.gz
+
+Source0: https://www.samba.org/ftp/talloc/talloc-%{version}.tar.gz
+Source1: https://www.samba.org/ftp/talloc/talloc-%{version}.tar.asc
+Source2: https://download.samba.org/pub/samba/samba-pubkey.asc#/talloc.keyring
 
 # Patches
 Patch0001: 0003-wafsamba-Fix-few-SyntaxWarnings-caused-by-regular-ex.patch
@@ -21,6 +24,7 @@ BuildRequires: docbook-style-xsl
 BuildRequires: python3-devel
 %endif
 BuildRequires: doxygen
+BuildRequires: gnupg2
 
 Provides: bundled(libreplace)
 Obsoletes: python2-talloc < 2.2.0-1
@@ -55,6 +59,7 @@ Development libraries for python3-talloc
 %endif
 
 %prep
+zcat %{SOURCE0} | gpgv2 --quiet --keyring %{SOURCE2} %{SOURCE1} -
 %autosetup -n talloc-%{version} -p1
 
 %build

sources

@@ -1 +1,2 @@
+SHA512 (talloc-2.3.0.tar.asc) = 5d491d22a776dedbd0523c5db5ee7b4f9e90058114a4556a161a9ed1f90086390fd3cdb6515dca60195bc0edf21476fe9c22ae22742bf9956c670539478c5ffe
 SHA512 (talloc-2.3.0.tar.gz) = f0020d83520ea24711040c44600180fabae7b0e0668a961a66f5d4f77d89b09d799ddadf781ee2d044ad059b2d6a2e5232068fd77b300a8366592c0ce2289837