Verify the tarball with the gpg key and amror file from Samba

.gitignore

@@ -76,3 +76,4 @@ samba-3.6.0pre1.tar.gz
 /samba-4.5.3.tar.xz
 /samba-4.6.0rc1.tar.xz
 /samba-4.6.0rc2.tar.xz
+/samba-4.6.0rc2.tar.asc

samba.spec

@@ -6,7 +6,7 @@
 # ctdb is enabled by default, you can disable it with: --without clustering
 %bcond_without clustering
 
-%define main_release 0
+%define main_release 1
 
 %define samba_version 4.6.0
 %define talloc_version 2.1.8
@@ -94,6 +94,8 @@ License:        GPLv3+ and LGPLv3+
 URL:            http://www.samba.org/
 
 Source0:        samba-%{version}%{pre_release}.tar.xz
+Source1:        samba-%{version}%{pre_release}.tar.asc
+Source2:        gpgkey-52FBC0B86D954B0843324CDC6F33915B6568B7EA.gpg
 
 # Red Hat specific replacement-files
 Source10: samba.log
@@ -145,6 +147,7 @@ BuildRequires: dbus-devel
 BuildRequires: docbook-style-xsl
 BuildRequires: e2fsprogs-devel
 BuildRequires: gawk
+BuildRequires: gnupg2
 BuildRequires: krb5-devel >= 1.14
 BuildRequires: libacl-devel
 BuildRequires: libaio-devel
@@ -170,6 +173,7 @@ BuildRequires: quota-devel
 BuildRequires: readline-devel
 BuildRequires: sed
 BuildRequires: xfsprogs-devel
+BuildRequires: xz
 BuildRequires: zlib-devel >= 1.2.3
 
 BuildRequires: pkgconfig(libsystemd)
@@ -668,6 +672,7 @@ and use CTDB instead.
 
 
 %prep
+xzcat %{SOURCE0} | gpgv2 --quiet --keyring %{SOURCE2} %{SOURCE1} -
 %autosetup -n samba-%{version}%{pre_release} -p1
 
 %build

sources

@@ -1 +1,2 @@
 SHA512 (samba-4.6.0rc2.tar.xz) = 4f0372ca5e04e69e23ae41935dc5289e9b392730891924a97a4686c86d33a5c8fb627cc6674a4b678ab70a97633eb424d96f76d87bd1b0ab04cdcae06eeef0c7
+SHA512 (samba-4.6.0rc2.tar.asc) = 7e55fdb6e47524a6a2b3928c93b5ee3a6bad43f6c7c5d0c48160be5de004e950afb30d47caeb4fb1098ecde94b90da4f08a9d3abc3db6e5ac310bf7d19240180