Always check the signature of the tarball

.gitignore

@@ -22,3 +22,6 @@
 /tdb-1.3.17.tar.gz
 /tdb-1.3.18.tar.gz
 /tdb-1.4.2.tar.gz
+/tdb.keyring
+/tdb-1.4.3.tar.asc
+/tdb-1.4.3.tar.gz

libtdb.spec

@@ -8,12 +8,16 @@ Release: 1%{?dist}
 Summary: The tdb library
 License: LGPLv3+
 URL: http://tdb.samba.org/
-Source: http://samba.org/ftp/tdb/tdb-%{version}.tar.gz
+Source0: http://samba.org/ftp/tdb/tdb-%{version}.tar.gz
+Source1: http://samba.org/ftp/tdb/tdb-%{version}.tar.asc
+# gpg2 --no-default-keyring --keyring ./tdb.keyring --recv-keys 9147A339719518EE9011BCB54793916113084025
+Source2: tdb.keyring
 
 # Patches
 Patch0001: 0003-wafsamba-Fix-few-SyntaxWarnings-caused-by-regular-ex.patch
 
 BuildRequires: gcc
+BuildRequires: gnupg2
 BuildRequires: libxslt
 BuildRequires: docbook-style-xsl
 %if 0%{?with_python3}
@@ -54,6 +58,7 @@ Python3 bindings for libtdb
 %autosetup -n tdb-%{version} -p1
 
 %build
+zcat %{SOURCE0} | gpgv2 --quiet --no-default-keyring --keyring %{SOURCE2} %{SOURCE1} -
 %configure --disable-rpath \
            --bundled-libraries=NONE \
            --builtin-libraries=replace

sources

@@ -1 +1,3 @@
-SHA512 (tdb-1.4.2.tar.gz) = 1d1f83e1b79cc6ea2b5cbc755de4a370fb95ef0f592f3bd2b6d23b1be18555cd417a9254fdf276dc6bd7f3368af82a4569c1f1cdde13d98405a5d38f1291d832
+SHA512 (tdb.keyring) = 9dd3ad33a29f2f8484b80f6a41db1ef0551d6fe1a265b9100e2d7e71085d010c944fb830cb752a9964e5a58e45ac33920927140b839da21a5ca5ef05ad903f4a
+SHA512 (tdb-1.4.3.tar.asc) = d384fbdb6ba11fb34077b49d47c26da04fd5c6046c3234cf35d83143c1ac41a25ed772bb41e3a36978cc29c425f7b47576b3ac92e59a5e8095e4e335758de8af
+SHA512 (tdb-1.4.3.tar.gz) = 99488839e7da396f04df60412d21a7d3e09efeab52772d6cb5e9470a3dfd585d73ef2422c51cd0d8ccc123a65d455de400d5d6b24a21a2a50d3da60d9a70e67a