New version 2.0.7

Add source code signature verification

.gitignore

@@ -5,3 +5,5 @@
 /log4cplus-1.1.3-rc3.tar.xz
 /log4cplus-1.2.0.tar.xz
 /log4cplus-2.0.5.tar.xz
+/log4cplus-2.0.7.tar.xz
+/log4cplus-2.0.7.tar.xz.sig

codesign.txt

@@ -0,0 +1,87 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mDMEWf3f1RYJKwYBBAHaRw8BAQdA+8IStMkkgNpf51nGCCVfGgaiznOp+xPcQtrf
+gfGLS9K0JFbDoWNsYXYgSGFpc21hbiA8dmhhaXNtYW5AZ21haWwuY29tPoiyBBMW
+CABaAhsDBQsJCAcCBhUICQoLAgQWAgMBAh4BAheAAhkBGBhoa3BzOi8va2V5cy5v
+cGVucGdwLm9yZxYhBOQGKS99CLuwCEYTFAS4nVHf5aIVBQJiari5BQkKTgxkAAoJ
+EAS4nVHf5aIVQ0ABAMtoZ/4YZm+7QEQ5YONpQ5FcpGhuvIQYK9RRDQRTlxZDAQDv
+YuX+snwqLQePCLLov7yZjEvB2QgFw59Myib6BfM5BohKBBMRAgAKBQJZ/etrAwUB
+eAAKCRCOSxG2Y7ayl93uAJ4uCdb/qczGzcD0Iu7Hs290PHfSDgCdHH4H9AgAODrc
+Daq7pD0oChZb1jWIfAQTFggAJAIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAUC
+Wf3prQIZAQAKCRAEuJ1R3+WiFfl8AP9JLM+qlbnF+tAI7tvjR2jQLwsA2fVQhOrF
+8EwlZf+09gEA9+oQiuAlw7HCD4Wf4/hKaFNZ0JYVZFV794L56gwgcwmIkAQTFggA
+OBYhBOQGKS99CLuwCEYTFAS4nVHf5aIVBQJgkvw2AhsDBQsJCAcCBhUKCQgLAgQW
+AgMBAh4BAheAAAoJEAS4nVHf5aIVkBcA/jQpB/xH8vJChGfxCCZyWekna/EIp5G0
+6l+VSsRok+W1AQCpAVR00GsAhqr4O9RArnMcgLTXIMF9uirTjM9JZviGAbQsVsOh
+Y2xhdiBIYWlzbWFuIDx3aWx4QHVzZXJzLnNvdXJjZWZvcmdlLm5ldD6IrwQTFggA
+VwIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBgYaGtwczovL2tleXMub3BlbnBn
+cC5vcmcWIQTkBikvfQi7sAhGExQEuJ1R3+WiFQUCYmq4wwUJCk4MZAAKCRAEuJ1R
+3+WiFW3QAP49XsDLHHBfvEP37vi0SDjAbMUjZbXPlH3tiSHMu8v4kgD/ffbk7aGr
+RyLuNxB0P8Ac3u3M+XpkggETf1dRWnQ1GgyISgQTEQIACgUCWf3tsQMFAXgACgkQ
+jksRtmO2spc0RQCfYTjbCddLqJWNc7oz1Wh7CWk0ff4AnjdwU7HzekqcCh9eNo6J
+Lbv4Gm+CiHkEExYIACEFAln97YMCGwMFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AA
+CgkQBLidUd/lohXLmgD+Ln3l3jFhsiuPK2TlWcn4/2O59lhWSXZ1xmaOwRhcUMYA
+/A1hV6G6VHONhg567WONW0Un7w3CruZNwWHNV1zD46QAiJAEExYIADgWIQTkBikv
+fQi7sAhGExQEuJ1R3+WiFQUCYJL8PgIbAwULCQgHAgYVCgkICwIEFgIDAQIeAQIX
+gAAKCRAEuJ1R3+WiFUf2AQDa1q8tF6x7DpksqT9FJNfqTkCqniqygGGlwQTb8KYg
+ogD9HQhlsc0sng/60yj1fRgHnKZIvfZ110e6qMzLyMxD9g+4OARZ/d/VEgorBgEE
+AZdVAQUBAQdAT08LT4YloL7m40Zh/HNkws1H0cKmwhO/cCUSTzMp8RMDAQgHiGcE
+GBYIAA8CGwwFAln94dIFCQHhNX0ACgkQBLidUd/lohX9ZQD/ZYixwzZJ+cbtatlw
+NIr0j4V0gVXckIbd+cweamrHBGwBAKYWKpJAehAxLWnTmEheHmhmMVCROBpx0bjM
+TWNyT3kGuDMEWf3h4BYJKwYBBAHaRw8BAQdAhnLXRgOQbYCAOXlj/Z/XL1kCGRk0
+7CAwNryWYFnQZJqIxwQYFggADwUCWf3h4AIbAgUJAeEzgABqCRAEuJ1R3+WiFV8g
+BBkWCAAGBQJZ/eHgAAoJEKiXT9RE+TBcH9kBANgCrJE3QSSkEVYanSuyxTq0P+vB
+7vVT3dYrwsj+O1j2AQCheTpZsHSQEbbzN9QS1LCZAcffOFjAk9Sg76CttfQGC/FR
+AQDe4KMVPeXghrUP0LywRj4a0l+4uxYLEdjla6o380WfbgD+Kh0b83lI69RAwoOg
+vTmXPiD2YHEtOpDPVGUEgjYG+QW4MwRccRF2FgkrBgEEAdpHDwEBB0BzaFf4Pw0y
+yyZh6bH6Cqk2o0hHMqJututviHMlhL8F7Yj1BBgWCAAmFiEE5AYpL30Iu7AIRhMU
+BLidUd/lohUFAlxxEXYCGwIFCQHhM4AAgQkQBLidUd/lohV2IAQZFggAHRYhBIkt
+JrnlK52GrKtMpnpY2TcE1csGBQJccRF2AAoJEHpY2TcE1csG/t0A/RfE4W7rDckX
+GpwBTS9IXRwvPyNVrDXw+hKBZBmGTj57AQCQpSmaHphzIaR5gUJdzii8CcCBi9x7
+Rk9fjtv3PCFaDfEiAQCA4D38xm24wLWQ6GbW1bDYKngvrN+aRdGjguj2ObFf2AEA
+nMa4cyQSIBVKMBghBGOKPAdN/kGZ5r+K/aqCxZVZFAO4cwRccRG8EgUrgQQAIgMD
+BD4m0Cir/FdwUAJmdHZvMZHnSFUN4JdFVRY9kl3MnAg4v568+eOVZ40ezPUZ857X
+n27qOq+Y1fTPuLhj0r7hepRYgB+WS+LQCuT9VLrD+SsZhBzfAotvMTCsY9Znm2HV
+MwMBCQmIfgQYFggAJhYhBOQGKS99CLuwCEYTFAS4nVHf5aIVBQJccRG8AhsMBQkB
+4TOAAAoJEAS4nVHf5aIVppcA/jD0qXONYoyWSah6x5wZs0fWLpzjzFEqEOB34Mxy
+bkmeAQCsdjAtn47WMWM0enS5hwoN25zsvqVACdmiztSYKRnCDrgzBF4+4+sWCSsG
+AQQB2kcPAQEHQNQcLmht4cDSeGMs9ReBS3Y/+lP4BQbhiUlynNMgpT+/iPUEGBYI
+ACYWIQTkBikvfQi7sAhGExQEuJ1R3+WiFQUCXj7j6wIbAgUJAeEzgACBCRAEuJ1R
+3+WiFXYgBBkWCAAdFiEED9DC8StoRDtxMOBwOGPvHo1+7zgFAl4+4+sACgkQOGPv
+Ho1+7zj7lAEAn3HZW1nNn+q4ZDz98cpwfQTTh3MDZvmC9hkfj6f6gdkA/ik/f01t
+7zJ7MvvApqcwXAqNIItP27B/DpCiFzFkgQMF9NIBANHNenVXXYTxcu8l9LiFO8BO
+b2Ss5qNc8DxOdn/XeOvNAP9p0NXPTUfHpFAMxbDJnkv8nWJLxWLGfziiMsca++oN
+BLh3BF4+5VwSCSskAwMCCAEBCwMDBIYQIVO+x7ye+rTfkVjwIzINXct12nQK0oOj
+iROerMGyMW5akOB6dQ3i2OFwXnp56SLYTVrJBhVRrcr1+EbVkLyxA5Gu12nKwDkH
+ZfsN9BRolDoWMI7AdMhsU7TNIUYQ7wMBCQmIfgQYFggAJhYhBOQGKS99CLuwCEYT
+FAS4nVHf5aIVBQJePuVcAhsMBQkB4TOAAAoJEAS4nVHf5aIVVAYA/R1Y4I7eHn+V
+7CemitfWfEaRoG+SH72dZediXUGcUZPZAQChUBnpJXylMa+zCvCdbt3ESZ+tCeJD
+jrjBBn0jaRGCBbgzBGAz62MWCSsGAQQB2kcPAQEHQKbJuaTDMNo8WBM/1SNSF/4j
+9ckePo5w2mETnLSYvw34iPUEGBYIACYWIQTkBikvfQi7sAhGExQEuJ1R3+WiFQUC
+YDPrYwIbAgUJAeEzgACBCRAEuJ1R3+WiFXYgBBkWCAAdFiEEc6TiHHfLZ2X3MZxd
+at0zPptAuFUFAmAz62MACgkQat0zPptAuFVcJAD+IjEiff51A0cJNok/OSDMPjTM
+QsFu2b62hVqL8t8aHIcA/0992AQQ/OdF0mIandLA/De4tdbn2cmQzeMbIUeu7UEP
+zmcA/3qjav+CBmtQTuw+VgaQPXGI2banXw4VpfUAWOr2fFfiAP9Vn/Ls8f5QxOpR
+j5m4N71G92zyj1eG4Oj+weiqi6WYALiXBGAz65ESBSuBBAAjBCMEAMnuiSMtsYnB
+0GDJYJieFynuW+Y2LfyDq+IvZESersH4xgReMlhAFYYb3FbATvbEqc6uC0eZeAPu
+TjaxCf6ljukjAArhDaX9lksXWqqgP2H/QEQoTBlL5s4CK4owQCFzxHKGU9nw+U9+
++8aMMwc/jS9kbGXSehRsT2qDezQf3WzU5SmOAwEKCYh+BBgWCAAmFiEE5AYpL30I
+u7AIRhMUBLidUd/lohUFAmAz65ECGwwFCQHhM4AACgkQBLidUd/lohWj+gD+NjpG
+ye8R4YSlhnhrMwSO5twlMJ4YUY5n0IroR3/AS14BALSLowU0bApbKkrf2wwY7lRb
++GXf2oSkFIV03xLASaEHuG8EYmq3eBMFK4EEACIDAwQsbpNdg6prJSZAh5hec8yC
+k20OHAdaO5MVTuIaCDV9zcwOAoLOFQL5qmhqbuGcf8QoZ5Q5eutuymUGC8krg5cd
+p8fyg7XetBNrrSsqZ7HzTEbcrLM/P3OnFlBnUQjyrK6JARUEGBYIACYWIQTkBikv
+fQi7sAhGExQEuJ1R3+WiFQUCYmq3eAIbAgUJAeEzgAChCRAEuJ1R3+WiFZYgBBkT
+CQAdFiEEBzOk3zJeJfZ/R+2bjDhZag7cmXcFAmJqt3gACgkQjDhZag7cmXfZjAF/
+TqvEBdL3qUzlzEbIl2Aet/+E+ZVvA3ttkirOj7+F6zaCWtkb0py0+vjQD2LOUkab
+AX4u1l+l1IXU5bH7+2qsWmxQkfKVAMqV8kGkKLC8YLV4Z7k7qp9se1UM98oyCoxN
+B0ZalwEAwtpTtW4E+jvgF8rhnrh9iWgw8zThA/gnLhAbJ6AyK20BAPRupgFGap8k
+alobvUc3aDOSEkt/+ySKRJPnXWLBm0wGuJcEYmq3shIFK4EEACMEIwQBs1+Qy/xM
+Iinrga4w7UDSYaAybPO6nsgmA4tzs7SA0d8OhRgSl6OS7ydnhMoeVstYahvJFfU6
+qA50NyEfghBTsZ8AopH+JaA1iiJIDFYBNC/XpDNIbuQdkNQRVd5r76KELgrXPg9a
+Rik1t70aYS/+01AMYto8y2UjOmG5qn7waIbxCygDAQoJiH4EGBYIACYWIQTkBikv
+fQi7sAhGExQEuJ1R3+WiFQUCYmq3sgIbDAUJAeEzgAAKCRAEuJ1R3+WiFXoIAQCr
+NScSSXWW4Jz00RPgPLgzxktusDGOfEQJnu/83oBE3AD9HFUIHn51sZwo2IMj3LyD
+B27vEEeUB+x9GClm9J6LEgw=
+=aKXx
+-----END PGP PUBLIC KEY BLOCK-----

log4cplus.spec

@@ -1,13 +1,15 @@
 #%%global prever rc3
 
 Name: log4cplus
-Version: 2.0.5
+Version: 2.0.7
-Release: 15%{?prever:.%{prever}}%{?dist}
+Release: 1%{?prever:.%{prever}}%{?dist}
 Summary: Logging Framework for C++
 
 License: ASL 2.0
 URL: http://sourceforge.net/projects/log4cplus
 Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}%{?prever:-%{prever}}.tar.xz
+Source1: http://downloads.sourceforge.net/%{name}/%{name}-%{version}%{?prever:-%{prever}}.tar.xz.sig
+Source2: codesign.txt
 
 %description
 log4cplus is a simple to use C++ logging API providing thread-safe, flexible,
@@ -19,12 +21,16 @@ Summary: Development files for log4cplus C++ logging framework
 Requires: %{name} = %{version}-%{release}
 BuildRequires: gcc-c++
 BuildRequires: make
+BuildRequires: gnupg2
 
 %description devel
 This package contains headers and libraries needed to develop applications
 using log4cplus logging framework.
 
 %prep
+%if 0%{?fedora}
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
+%endif
 %setup -q %{?prever:-n %{name}-%{version}-%{prever}}
 
 %build
@@ -64,6 +70,10 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/liblog4cplus*.{a,la}
 %{_libdir}/pkgconfig/log4cplus.pc
 
 %changelog
+* Thu Jun 02 2022 Martin Osvald <mosvald@redhat.com> - 2.0.7-1
+- New version 2.0.7
+- Add source code signature verification
+
 * Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.5-15
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
 

sources

@@ -1 +1,2 @@
-SHA512 (log4cplus-2.0.5.tar.xz) = 916bd148d4f30d2dd14446faf2327ee4c8ad48c62666d5e3970a1f4b29a234f6af770164ee5db5a5a8d5a23d3fab6361abcbb49ba31b23513823dd64cb70ba46
+SHA512 (log4cplus-2.0.7.tar.xz) = 5f5a84f215a00b52313cf75bce19a450e810300f232cd29582a23a24b426bfb62047099792243f8ec5347a8c04eb7744237b1ed4615f4a8913575406486c59c5
+SHA512 (log4cplus-2.0.7.tar.xz.sig) = 4fe4e8b7004d4995978b6f8b857dffbc9d8f27ffc065ac3fd144327fb8ac154c9e37d5d96dd24b4db2710b6bfd17b09c1f5b49e979cdfb4488170002e7df4016