Checking the signature from 4.0.11 to 4.0.12 have been broken

[hegjon]

What keys should I use to compare the signature?

I have only used D56C110F4555F371AEEFCB254FD06489EFF1DDE1 for all released up to 4.0.11.

Should I include D465135F97D0047E18E99DC321810A542031C02C?

Are there other keys I should add? Or should I change some flags for gpgv2?

jonny@jonny-thinkpad ~/fedora-scm/electron-cash (master) {8.12.0} $ spectool -g electron-cash.spec 
Getting https://github.com/Electron-Cash/Electron-Cash/releases/download/4.0.12/Electron-Cash-4.0.12.tar.gz to ./Electron-Cash-4.0.12.tar.gz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   617    0   617    0     0   1649      0 --:--:-- --:--:-- --:--:--  1649
100 4232k  100 4232k    0     0   336k      0  0:00:12  0:00:12 --:--:--  541k
Getting https://github.com/Electron-Cash/keys-n-hashes/raw/master/sigs-and-sums/4.0.12/win-linux/JF.Electron-Cash-4.0.12.tar.gz.asc to ./JF.Electron-Cash-4.0.12.tar.gz.asc
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (22) The requested URL returned error: 404 Not Found
jonny@jonny-thinkpad ~/fedora-scm/electron-cash (master) {8.12.0} $ spectool -g electron-cash.spec 
Getting https://github.com/Electron-Cash/Electron-Cash/releases/download/4.0.12/Electron-Cash-4.0.12.tar.gz to ./Electron-Cash-4.0.12.tar.gz
./Electron-Cash-4.0.12.tar.gz already exists, skipping download
Getting https://github.com/Electron-Cash/keys-n-hashes/raw/master/sigs-and-sums/4.0.12/win-linux/Electron-Cash-4.0.12.tar.gz.asc to ./Electron-Cash-4.0.12.tar.gz.asc
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   197  100   197    0     0    358      0 --:--:-- --:--:-- --:--:--   358
100   441  100   441    0     0    514      0 --:--:-- --:--:-- --:--:--   514
jonny@jonny-thinkpad ~/fedora-scm/electron-cash (master) {8.12.0} $ fedpkg local 


Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.6OlUdU
+ umask 022
+ cd /home/jonny/fedora-scm/electron-cash
+ gpgv2 --quiet --keyring /home/jonny/fedora-scm/electron-cash/gpgkey-electron-cash.gpg /home/jonny/fedora-scm/electron-cash/Electron-Cash-4.0.12.tar.gz.asc /home/jonny/fedora-scm/electron-cash/Electron-Cash-4.0.12.tar.gz
gpgv: Signature made Tue Dec 10 16:07:10 2019 CET
gpgv:                using DSA key D465135F97D0047E18E99DC321810A542031C02C
gpgv: Can't check signature: No public key
gpgv: Signature made Wed Dec 11 04:17:57 2019 CET
gpgv:                using DSA key 4FD06489EFF1DDE1
gpgv: Good signature from "Jonald Fyookball <[email protected]>"
error: Bad exit status from /var/tmp/rpm-tmp.6OlUdU (%prep)
    Bad exit status from /var/tmp/rpm-tmp.6OlUdU (%prep)


RPM build errors:
Could not execute local: rpmbuild --define '_sourcedir /home/jonny/fedora-scm/electron-cash' --define '_specdir /home/jonny/fedora-scm/electron-cash' --define '_builddir /home/jonny/fedora-scm/electron-cash' --define '_srcrpmdir /home/jonny/fedora-scm/electron-cash' --define '_rpmdir /home/jonny/fedora-scm/electron-cash' --define 'dist %{?distprefix}.fc32' --define 'fedora 32' --eval '%undefine rhel' --define 'fc32 1' --eval '%undefine fc30' -ba /home/jonny/fedora-scm/electron-cash/electron-cash.spec | tee .build-4.0.12-1.fc32.log