re-import sources as agreed with the maintainer

.gitignore

@@ -1,2 +1,28 @@
-SOURCES/log4j-2.17.2.tar.gz
+/results_*
+/*.src.rpm
+
+/apache-log4j-1.2.16.tar.gz
+/log4j-1.2.17.tar.gz
+/apache-log4j-2.0-rc1-src.tar.gz
+/apache-log4j-2.0-src.tar.gz
+/apache-log4j-2.2-src.tar.gz
+/apache-log4j-2.3-src.tar.gz
+/apache-log4j-2.5-src.tar.gz
+/apache-log4j-2.6.1-src.tar.gz
+/apache-log4j-2.7-src.tar.gz
+/apache-log4j-2.8.1-src.tar.gz
+/apache-log4j-2.8.2-src.tar.gz
+/apache-log4j-2.9.0-src.tar.gz
+/apache-log4j-2.9.1-src.tar.gz
+/apache-log4j-2.11.1-src.tar.gz
+/apache-log4j-2.12.1-src.tar.gz
+/apache-log4j-2.13.0-src.tar.gz
+/apache-log4j-2.13.1-src.tar.gz
+/apache-log4j-2.13.3-src.tar.gz
+/apache-log4j-2.14.1-src.tar.gz
+/apache-log4j-2.15.0-src.tar.gz
+/apache-log4j-2.16.0-src.tar.gz
+/apache-log4j-2.17.0-src.tar.gz
+/apache-log4j-2.17.1-src.tar.gz
+/log4j-2.17.1.tar.gz
 /log4j-2.17.2.tar.gz

generate-tarball.sh

@@ -0,0 +1,29 @@
+#!/bin/bash
+set -e
+
+name=log4j
+version="$(sed -n 's/Version:\s*//p' *.spec)"
+
+# RETRIEVE
+wget "https://archive.apache.org/dist/logging/log4j/${version}/apache-log4j-${version}-src.tar.gz" -O "${name}-${version}.orig.tar.gz"
+wget "https://archive.apache.org/dist/logging/log4j/${version}/apache-log4j-${version}-src.tar.gz.asc" -O "${name}-${version}.orig.tar.gz.asc"
+wget "https://www.apache.org/dist/logging/KEYS" -O "${name}-${version}.keyring"
+
+# VERIFY
+$(rpm -E '%{gpgverify}') --keyring="${name}-${version}.keyring" --signature="${name}-${version}.orig.tar.gz.asc" --data="${name}-${version}.orig.tar.gz"
+
+rm -rf tarball-tmp
+mkdir tarball-tmp
+pushd tarball-tmp
+tar -xf "../${name}-${version}.orig.tar.gz"
+
+# CLEAN TARBALL
+find -name '*.jar' -delete
+find -name '*.class' -delete
+find -name '*.zip' -delete
+find -name '*.dll' -delete
+rm -rf "apache-log4j-${version}-src/src/site"
+
+tar -czf "../${name}-${version}.tar.gz" *
+popd
+rm -r tarball-tmp "${name}-${version}.orig.tar.gz"