diff --git a/BibTool-2.67.tar.gz.asc b/BibTool-2.67.tar.gz.asc
new file mode 100644
index 0000000..373a644
--- /dev/null
+++ b/BibTool-2.67.tar.gz.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+
+iQEcBAABAgAGBQJYehhvAAoJEOohaL5pkhOilaMH/i9aZV611vxpNHNe4QO9+ltg
+PCeQhTd5N1HUZCVeF+MLBQEtP3iOXVo+Kc2GlebZwNTKoRST1LMWqQmdap7+Xix1
+FjAsmWjdEbfBZlwxr7Zq26L3Sp780qs6U9P7wJsaNmrRQ6WIQidw+GFY87xejqLi
+tZ7hlahTyFUmP8VhVcPMliVGThrAq0P7MTmvlIHY2G8h6+2eibf5kwNAQSuhBY3F
+AT+Fp5fj8YnsPzi/yXHqi5Lx85L2cZnrfrjw5jCjpWXmBt05XTt3UenL85/nJ0IH
+TPJ+FE2jyk1kF5Wck1foTdDGkGfajcZaTl1Dpmw2oFHICKJMHtvTggfAaWBl1qA=
+=zM6R
+-----END PGP SIGNATURE-----
diff --git a/BibTool.spec b/BibTool.spec
index 664e6c2..b749c79 100644
--- a/BibTool.spec
+++ b/BibTool.spec
@@ -1,8 +1,11 @@
 Summary:        A Tool for manipulating BibTeX data bases
 Name:           BibTool
 Version:        2.67
-Release:        10%{?dist}
-Source:         ftp://ftp.dante.de/tex-archive/biblio/bibtex/utils/bibtool/BibTool-%{version}.tar.gz
+Release:        11%{?dist}
+Source0:         https://github.com/ge-ne/bibtool/releases/download/BibTool_2_67/BibTool-%{version}.tar.gz
+Source1:         https://github.com/ge-ne/bibtool/releases/download/BibTool_2_67/BibTool-%{version}.tar.gz.asc
+# Imported from public key servers; author provides no fingerprint!
+Source2:        gpgkey-E2A609830CE1675666671B86EA2168BE699213A2.gpg
 URL:            http://www.gerd-neugebauer.de/software/TeX/BibTool/
 Patch0:         BibTool-2.51-regex.patch
 Patch1:         0001-make-doc-work-with-LuaTeX-0.85.patch
@@ -11,6 +14,7 @@ Patch3:         0001-fix-duplicate-case-problem.patch
 License:        GPL+
 BuildRequires:  gcc
 BuildRequires:  tex(latex) tex-bibtex tex-makeindex tex(luatex85.sty)
+BuildRequires:  gnupg2
 
 %description
 BibTeX provides an easy to use means to integrate citations and
@@ -20,6 +24,7 @@ fill this gap. BibTool allows the manipulation of BibTeX files which
 goes beyond the possibilities --- and intentions --- of BibTeX.
 
 %prep
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 %setup -q -n %{name}
 %patch0 -p1 -b .regex
 %patch1 -p1 -b .luatex85
@@ -50,6 +55,10 @@ make install-man INSTALLPREFIX=$RPM_BUILD_ROOT INSTALL='install -p -m 644'
 %{_mandir}/man1/bibtool.1*
 
 %changelog
+* Thu Jul 25 2019 Michael J Gruber <mjg@fedoraproject.org> - 2.67-11
+- switch to SSL source URL
+- verify package signature
+
 * Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.67-10
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
 
diff --git a/gpgkey-E2A609830CE1675666671B86EA2168BE699213A2.gpg b/gpgkey-E2A609830CE1675666671B86EA2168BE699213A2.gpg
new file mode 100644
index 0000000..421a26f
Binary files /dev/null and b/gpgkey-E2A609830CE1675666671B86EA2168BE699213A2.gpg differ