diff --git a/.gitignore b/.gitignore
index 2af5166..93a4f26 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,4 @@ clog
 /i386/
 /noarch/
 /libguestfs-*.tar.gz
+/libguestfs-*.tar.gz.sig
diff --git a/libguestfs.spec b/libguestfs.spec
index c7fa861..5540316 100644
--- a/libguestfs.spec
+++ b/libguestfs.spec
@@ -27,7 +27,7 @@
 %global _changelog_trimtime %(date +%s -d "2 years ago")
 
 # Verify tarball signature with GPGv2 (only possible for stable branches).
-%global verify_tarball_signature %{nil}
+%global verify_tarball_signature 1
 
 # Filter perl provides
 %{?perl_default_filter}
@@ -41,9 +41,9 @@ License:       LGPLv2+
 
 # Source and patches.
 URL:           http://libguestfs.org/
-Source0:       http://libguestfs.org/download/1.35-development/%{name}-%{version}.tar.gz
+Source0:       http://libguestfs.org/download/1.38-stable/%{name}-%{version}.tar.gz
 %if 0%{verify_tarball_signature}
-Source1:       http://libguestfs.org/download/1.35-development/%{name}-%{version}.tar.gz.sig
+Source1:       http://libguestfs.org/download/1.38-stable/%{name}-%{version}.tar.gz.sig
 %endif
 
 # Replacement README file for Fedora users.
@@ -1377,6 +1377,8 @@ install -m 0644 utils/boot-benchmark/boot-benchmark.1 $RPM_BUILD_ROOT%{_mandir}/
 %changelog
 * Fri Feb 09 2018 Richard W.M. Jones <rjones@redhat.com> - 1:1.38.0-1
 - New upstream version 1.38.0.
+- Enable tarball signing since we are on a stable branch.
+- Fix Source URLs.
 
 * Tue Feb 06 2018 Richard W.M. Jones <rjones@redhat.com> - 1:1.37.37-1
 - New upstream version 1.37.37.
diff --git a/sources b/sources
index d952fa0..41a7951 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
 SHA512 (libguestfs-1.38.0.tar.gz) = 24f72266cfad6f6060c0ee05edd2bc41c5bdf9b9f42bd866604cbebbb9b337c9b308c61e38cc93c5dc7d2ccc82676e4792950ab902b82100fd0976ebd29dc1af
+SHA512 (libguestfs-1.38.0.tar.gz.sig) = 6f90115f0137aeafbd0e5edf0bd87af84a2480ad97a2b72b37ef6f0d65b29bc3d7b5ac798b481244a89d9d91559f86427635ec29931bf5f33955da67cd89bc7f