Add GPG verify on the package

.gitignore

@@ -16,3 +16,4 @@
 /man-db-2.11.1.tar.xz
 /man-db-2.11.2.tar.xz
 /man-db-2.12.0.tar.xz
+/man-db-2.12.0.tar.xz.asc

man-db.spec

@@ -3,17 +3,20 @@
 Summary: Tools for searching and reading man pages
 Name: man-db
 Version: 2.12.0
-Release: 1%{?dist}
+Release: 2%{?dist}
 # GPLv2+ .. man-db
 # GPLv3+ .. gnulib
 License: GPL-2.0-or-later AND GPL-3.0-or-later
 URL: http://www.nongnu.org/man-db/
 
 Source0: http://download.savannah.gnu.org/releases/%{name}/%{name}-%{version}.tar.xz
-Source1: man-db.crondaily
-Source2: man-db.sysconfig
-Source3: man-db-cache-update.service
-Source4: man-db-restart-cache-update.service
+Source1: http://download.savannah.gnu.org/releases/%{name}/%{name}-%{version}.tar.xz.asc
+Source2: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xac0a4ff12611b6fccf01c111393587d97d86500b
+
+Source3: man-db.crondaily
+Source4: man-db.sysconfig
+Source5: man-db-cache-update.service
+Source6: man-db-restart-cache-update.service
 
 Obsoletes: man < 2.0
 Provides: man = %{version}
@@ -27,6 +30,7 @@ BuildRequires: gcc
 BuildRequires: systemd
 BuildRequires: gdbm-devel, gettext, groff, less, libpipeline-devel, zlib-devel
 BuildRequires: po4a, perl-interpreter, perl-version
+BuildRequires: gnupg2
 Recommends: glibc-gconv-extra
 
 Requires(post): %{_sbindir}/update-alternatives
@@ -53,6 +57,7 @@ BuildArch: noarch
 This package provides periodic update of man-db cache.
 
 %prep
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 %autosetup -p1
 
 %build
@@ -227,6 +232,9 @@ fi
 %config(noreplace) %{_sysconfdir}/cron.daily/man-db.cron
 
 %changelog
+* Fri Sep 29 2023 Lukas Javorsky <ljavorsk@redhat.com> - 2.12.0-2
+- Add GPG verify on the package
+
 * Wed Sep 27 2023 Lukas Javorsky <ljavorsk@redhat.com> - 2.12.0-1
 - Rebase to version 2.12.0
 - Patch0 was upstreamed

sources

@@ -1 +1,2 @@
 SHA512 (man-db-2.12.0.tar.xz) = 4b644a508cf10ef6d27b6325b08f8a89e0695bbc1409bf420efd27649c6851860cc472c4d86063f7b71dccd01fb158faa82afa1e2b91c9a20154acf66b0349bf
+SHA512 (man-db-2.12.0.tar.xz.asc) = 20ee61dacc33acee92c1c7d9b63df538c8dd884775ae00c3cb984158424a57a6d6906cacd2dc2b914fb3a293dc37b98f757d361b56c6706236867f3462f9996b