Add gpg check to release's signature

.gitignore

@@ -1 +1,3 @@
 /spice-gtk-*.tar.bz2
+/spice-gtk-0.37.tar.bz2.sig
+/victortoso-E37A484F.keyring

sources

@@ -1 +1,3 @@
 SHA512 (spice-gtk-0.37.tar.bz2) = a0a20bc6f25337d86e57fe1fc9586c4cc84457fc8c38cdcc5a728990a69018da0fca3ab5aa63349786b5a7508c82b716c94803eefb3495cffb7df4526db2d029
+SHA512 (spice-gtk-0.37.tar.bz2.sig) = 2d9cecac89b1e0413ea390dae5c9e7e96cfbd4f00a941aa9df98502ff40aee90692fc86d5bf18ef4dd806b5f65618a5118cf2aa6dfe3b6ffda84cf40b33e80c9
+SHA512 (victortoso-E37A484F.keyring) = 091755da8a358c8c8ebd3b5443b4b5eb3c260afed943454c085d48c973de6a42763547c321c64e4da5c1b2983ad0c5146aaeddeb1d54ef414f7e6a530a3bf14a

spice-gtk.spec

@@ -9,6 +9,8 @@ License:        LGPLv2+
 URL:            https://www.spice-space.org/spice-gtk.html
 #VCS:           git:git://anongit.freedesktop.org/spice/spice-gtk
 Source0:        https://www.spice-space.org/download/gtk/%{name}-%{version}%{?_version_suffix}.tar.bz2
+Source1:        https://www.spice-space.org/download/gtk/%{name}-%{version}%{?_version_suffix}.tar.bz2.sig
+Source2:        victortoso-E37A484F.keyring
 
 BuildRequires: git-core
 BuildRequires: meson
@@ -38,6 +40,7 @@ BuildRequires: gstreamer1-devel >= 1.10 gstreamer1-plugins-base-devel >= 1.10
 BuildRequires: python3-six
 BuildRequires: python3-pyparsing
 BuildRequires: openssl-devel
+BuildRequires: gnupg2
 
 Obsoletes: spice-gtk-python < 0.32
 
@@ -102,6 +105,7 @@ spicy-screenshot is a tool to capture screen-shots of a SPICE desktop.
 
 
 %prep
+gpgv2 --quiet --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0}
 %autosetup -S git_am
 
 
@@ -186,6 +190,7 @@ spicy-screenshot is a tool to capture screen-shots of a SPICE desktop.
 %changelog
 * Thu May 16 2019 Victor Toso <victortoso@redhat.com> - 0.37-1
 - Update to v0.37
+- Add gpg check to release's signature
 
 * Thu Mar 07 2019 Christophe Fergeau <cfergeau@redhat.com> - 0.36-5
 - Use actual upstream patches, I made a mistake in the previous build