newsNews: Article: How can I certify or check the authenticity of stored files ?

 
 
Show feedback again
Latest News
Gna.org SSL certificate renewed posted by zerodeux, Thu 24 Apr 2014 07:13:06 AM UTC - 13 replies
Heartbleed status and measures posted by beuc, Wed 09 Apr 2014 09:47:29 AM UTC - 6 replies
mail subsystem automatically reinstalled posted by beuc, Sat 08 Mar 2014 11:02:17 PM UTC - 3 replies
Reboot posted by beuc, Tue 04 Mar 2014 10:14:15 PM UTC - 6 replies
download+homepage subsystem automatically reinstalled posted by beuc, Sun 02 Mar 2014 09:53:20 PM UTC - 18 replies
[122 news in archive]

Article: How can I certify or check the authenticity of stored files ?

Item posted by Mathieu Roy <yeupou> on Mon 10 May 2004 10:27:34 AM UTC.

How can I certify or check the authenticity of stored files ?

To check the authenticity of a file, one of the best tools currently available is GPG. We will not describe here what is GnuPG and how it works: if you are looking for that information, check the GnuPG documentation.

    • How can I check the authenticity of a file using GnuPG [for everybody]

You can use GnuPG to check the authenticity of a file only if this file has been signed with GnuPG in first place.

Download the file you are interested in and its signature. The signature is usually named after the file with a .sig. For instance, at http://download.gna.org/savane , you can download savane-1.0.2.tar.gz (the file) and savane-1.0.2.tar.gz.sig (the signature).

Use GnuPG to compare the files:
gpg --verify savane-1.0.2.tar.gz.sig

If it says that the relevant public key is not found, you must import the public key of the person that signed the file. We recommend that developers give this information in their download area. For instance, this is mentioned at http://download.gna.org/savane , in a section called GPG Signature. You can search and import a key by typing:
gpg --search-keys name_of_the_person_that_signed_the_file

If it says the signature is correct, the authenticity of the file is confirmed. Indeed, the signature should belong to a member of the project.

    • How can I sign a file using GnuPG [for developers]

Users can only check authenticity of files if these files are signed by their(s) author(s). So it is important that developers sign their package, especially software release tarballs.

Obviously, you need our own gpg key to sign files. We will not describe here how to create a such key: please read the GnuPG documentation.

The best is to create a "detached" signature (a signature as separate file, not appended to the original file). You can do that by typing:
gpg --detach myfile

When it is done, you can upload both the file and the signature.

You should make sure that your public key is available to users by sending it to key server:
gpg --send-key

You should make sure users can import with ease your gpg-key on the key server. To do so, you can mention an accurate search string in a file called README.html, stored in the same directory than the signed files, like http://download.gna.org/savane/README.html

(This article has been added as FAQ entry)

Comments:

events are awesome... (posted by galaxy, Sat 18 Apr 2015 01:13:57 PM UTC)

mothers day 2015 will be celebrate on the 10th may 2015 and you all guys are preparing for this big event. This is a big day for all mom, sons and daughters. All the children are busy to surprise their mothers. here we are sharing with you the latest mothers day quotes so that you can wish your mother on this beautiful mother's day 2015.
you can send these quotes ans sayings on the internet via facebook as well as twitter. you can also send these sayings over the mobile phones as well as cell phones. you can also send these wishes via whatsapp messenger and blackberry messenger.
http://www.anzac-day2015.com
http://www.whenismothersdayy2015.com
http://www.happymothersdayimages2015.com
http://www.anzac-day2015.com
http://www.whenismothersdayy2015.com
http://www.happymothersdayimages2015.com
http://www.anzac-day2015.com
http://www.whenismothersdayy2015.com
http://www.happymothersdayimages2015.com
http://www.anzac-day2015.com
http://www.whenismothersdayy2015.com
http://www.happymothersdayimages2015.com
http://www.anzac-day2015.com
http://www.whenismothersdayy2015.com
http://www.happymothersdayimages2015.com
http://www.anzac-day2015.com
http://www.whenismothersdayy2015.com
http://www.happymothersdayimages2015.com
http://www.anzac-day2015.com
http://www.whenismothersdayy2015.com
http://www.happymothersdayimages2015.com
http://www.anzac-day2015.com
http://www.whenismothersdayy2015.com
http://www.happymothersdayimages2015.com

[ Reply ]


Movers and Packers Pune - Shifting and Shifti (posted by Vishanu Albela, Fri 17 Apr 2015 05:09:00 AM UTC)

Packers and Movers Pune @ http://www.top5quotes.in/packers-and-movers-in-pune.html
Packers and Movers Bangalore @ http://www.top5quotes.in/packers-and-movers-in-bangalore.html
Packers and Movers in Pune @ http://www.top8pm.in/packers-and-movers-pune.html
Packers and Movers in Bangalore @ http://www.top8pm.in/packers-and-movers-bangalore.html

[ Reply ]


across your 1243123 (posted by Paul Tretior, Tue 24 Mar 2015 07:40:01 AM UTC)

<a href="https://www.linkedin.com/groups/Paid-Surveys-Home-Review-Is-8258598.S.5975991457796943872">Paid Surveys at Home</a>
<a href="https://www.rebelmouse.com/RealTranslatorJobsReviewHere/">Real Translator Jobs Reviews</a>
<a href="https://www.rebelmouse.com/EverstrykeMatchReview/">Everstryke Match Review</a>
<a href="https://www.facebook.com/pages/Total-Hair-Regrowth-Review-Download-PDF-Ebook-Video/359837164204682">Total Hair Regrowth Reviews</a>
<a href="https://www.linkedin.com/groups/Diabetes-Cure-Review-Is-it-6942612.S.5973877880873037824">does The Diabetes Cure work</a>
<a href="https://www.linkedin.com/groups/Magic-Making-Up-Review-Is-8263627.S.5978078288457854976">The Magic of Making Up Reviews</a>
<a href="https://www.facebook.com/pages/Zygor-Guides-Review-Download-PDF-Ebook-Video/1579272602314673">Zygor Guides Reviews</a>
<a href="https://www.facebook.com/pages/Learn-Photo-Editing-Review-Download-PDF-Ebook-Video/334300540103100">Learn Photo Editing</a>
<a href="https://www.facebook.com/pages/Fibroids-Miracle-Review-Download-PDF-Ebook-Video/792067454179740">does Fibroids Miracle work</a>
<a href="https://www.linkedin.com/groups/Natural-Clear-Vision-Review-Is-8258598.S.5975984533974114307">does Natural Clear Vision work</a>
<a href="https://www.linkedin.com/groups/Start-Potty-Training-Review-Is-8263627.S.5977840549388972033">does Start Potty Training work</a>
<a href="https://www.linkedin.com/groups/Beta-Switch-Review-Is-it-8263627.S.5978075575833673732">does The Beta Switch work</a>
<a href="https://www.rebelmouse.com/SavetheMarriageSystemReviewIt/">does Save the Marriage System work</a>
<a href="https://www.rebelmouse.com/RevertirlaDiabetesRevision/">Revertir la Diabetes Review</a>
<a href="https://www.linkedin.com/groups/Survival-MD-Review-Is-it-8263627.S.5977841660845977600">Survival MD Review</a>
<a href="https://www.facebook.com/pages/Skinnylicious-Cooking-Review-Download-PDF-Ebook-Video/414247245405876">does Skinnylicious Cooking work</a>
<a href="https://www.linkedin.com/groups/Tinnitus-Remedy-Review-Is-it-6946680.S.5978522033678475267">Tinnitus Remedy Reviews</a>
<a href="https://www.facebook.com/pages/Detox-My-Mac-Review-Download-PDF-Ebook-Video/1560929427482466">Detox My Mac</a>
<a href="https://www.rebelmouse.com/MakeWomenWantYouReviewHere/">Make Women Want You Reviews</a>
<a href="https://www.rebelmouse.com/WhatMenSecretlyWantReviewHere/">What Men Secretly Want Reviews</a>
<a href="https://www.linkedin.com/groups/Old-School-New-Body-Review-8258598.S.5975979838731800577">Old School New Body Review</a>
<a href="https://www.linkedin.com/groups/Teds-Woodworking-Review-Is-it-8263627.S.5977840496624623619">Teds Woodworking</a>
<a href="https://www.linkedin.com/groups/Acne-No-More-Review-Is-8252834.S.5972278650769334272">Acne No More Review</a>
<a href="https://www.linkedin.com/groups/Magnetic-Messaging-Review-Is-it-8258229.S.5974233054141575170">Magnetic Messaging Reviews</a>
<a href="https://www.linkedin.com/groups/Make-Women-Want-You-Review-8258598.S.5975981549970083841">Make Women Want You Review</a>
<a href="https://www.rebelmouse.com/FibroidsMiracleReviewHere/">does Fibroids Miracle work</a>
<a href="https://www.facebook.com/TaoReview">does Tao of Badass work</a>
<a href="https://www.facebook.com/pages/WOW-Tycoon-Review-Download-PDF-Ebook-Video/356695371196619">does WOW Tycoon work</a>
<a href="https://www.facebook.com/pages/Everyday-Roots-Review-Download-PDF-Ebook-Video/1696586673901542">Everyday Roots Reviews</a>
<a href="https://www.linkedin.com/groups/Zygor-Guides-Review-Is-it-6946680.S.5978564187272531968">Zygor Guides Reviews</a>

[ Reply ]


Expert Packers and Movers (posted by Raushan Kumar, Wed 18 Mar 2015 09:35:05 AM UTC)

Once the transporters have ability of working with the transits without impacting its top great quality, we can opt with such transport support suppliers

http://www.expert5th.in/packers-and-movers-hyderabad/
http://www.expert5th.in/packers-and-movers-mumbai/
http://packersmoverspune.top3rd.in/
http://www.expert5th.in/packers-and-movers-chennai/
http://www.expert5th.in/packers-and-movers-chennai/
http://www.expert5th.in/packers-and-movers-bangalore/
http://www.expert5th.in/packers-and-movers-gurgaon/
http://www.expert5th.in/packers-and-movers-delhi/
http://www.expert5th.in/packers-and-movers-noida/

[ Reply ]


endapa (posted by Paul Tretior, Wed 11 Mar 2015 09:59:02 AM UTC)

endapat nilai te

https://www.rebelmouse.com/WatchCinderellaOnline/
https://www.rebelmouse.com/WatchTheLazarusEffectOnline/
https://www.facebook.com/WatchGetHardOnlineNow
https://www.rebelmouse.com/WatchMcFarlandUSAOnline/
https://www.linkedin.com/groups/Watch-Run-All-Night-Online-6948869.S.5979613676498345988
https://www.rebelmouse.com/WatchUnfinishedBusinessOnline/
https://www.rebelmouse.com/WatchTheDuffOnline/
https://www.linkedin.com/groups/Watch-Home-Online-2015-6951185.S.5980987996097228803
https://www.rebelmouse.com/WatchTheLazarusEffectOnline/
https://www.facebook.com/WatchMcFarlandUSAOnline
https://www.rebelmouse.com/WatchHomeOnline/
https://www.rebelmouse.com/SecondBestExoticMarigoldHotel/
https://www.facebook.com/WatchCinderellaOnline
https://www.rebelmouse.com/WatchHomeOnline/
https://www.linkedin.com/groups/Watch-Home-Online-2015-6951185.S.5980987996097228803
https://www.linkedin.com/groups/Watch-Get-Hard-Online-2015-6951185.S.5980988221486542848
https://www.rebelmouse.com/WatchMcFarlandUSAOnline/
https://www.rebelmouse.com/WatchTheGunmanOnline/
https://www.linkedin.com/groups/Watch-McFarland-USA-Online-2015-6948869.S.5979609810042114048
https://www.linkedin.com/groups/Watch-Cinderella-Online-2015-6948869.S.5979614369355423744
https://www.facebook.com/WatchTheGunmanOnlineNow
https://www.linkedin.com/groups/Watch-Chappie-Online-2015-6948869.S.5979613127669469186
https://www.linkedin.com/groups/Watch-Chappie-Online-2015-6948869.S.5979613127669469186
https://www.rebelmouse.com/WatchFocusOnline/
https://www.rebelmouse.com/SecondBestExoticMarigoldHotel/
https://www.rebelmouse.com/WatchCinderellaOnline/
https://www.linkedin.com/groups/Watch-Chappie-Online-2015-6948869.S.5979613127669469186
https://www.linkedin.com/groups/Watch-Lazarus-Effect-Online-2015-6948869.S.5979611991877115908
https://www.rebelmouse.com/WatchHotTubTimeMachine2Online/
https://www.rebelmouse.com/WatchTheGunmanOnline/

[ Reply ]


good (posted by Joey C. Arrant, Sat 07 Mar 2015 03:48:35 PM UTC)

Without this key network, it is still usefull to have gpg-key files signed https://www.linkedin.com/groups/Power-Innovator-Program-Review-Is-8262451.S.5976635327031361538
https://www.facebook.com/pages/Boost-Your-Bust-Review-Download-PDF-Ebook-Video/1542362529368610
https://www.facebook.com/pages/Free-Credit-Card-Knife-Review-Download-PDF-Ebook-Video/898945043460055
https://www.facebook.com/pages/The-Truth-About-Fat-Burning-Foods-Review-Download-PDF-Ebook-Video/1564479887141134
https://www.facebook.com/pages/Video-Game-Tester-Jobs-Review-Download-PDF-Ebook-Video/348689348651480
https://www.facebook.com/pages/Truth-About-Abs-Review-Download-PDF-Ebook-Video/1568826243364864
https://www.facebook.com/pages/Learn-Photo-Editing-Review-Download-PDF-Ebook-Video/334300540103100
https://www.linkedin.com/groups/Somanabolic-Muscle-Maximizer-Review-Is-8263627.S.5977837158101250051
https://www.facebook.com/pages/Make-Women-Want-You-Review-Download-PDF-Ebook-Video/981638218543427
https://www.rebelmouse.com/4CycleFatLossSolutionReviews/
https://www.rebelmouse.com/ForexTrendyReviewHere/
https://www.rebelmouse.com/AdonisGoldenRatioReviewIt/
https://www.facebook.com/TaoReview
https://www.linkedin.com/groups/Shapeshifter-Yoga-Review-Is-it-8262451.S.5976640391577948164
https://www.facebook.com/pages/Vinaudit-Review-Download-PDF-Ebook-Video/1419315478368954
https://www.rebelmouse.com/AutoBinarySignalsReviews/
https://www.rebelmouse.com/EczemaFreeForeverReviewIt/
https://www.rebelmouse.com/QuemandoYGozandoRevision/
https://www.linkedin.com/groups/Natural-Vitiligo-Treatment-System-Review-8258598.S.5975988712364920835
https://www.rebelmouse.com/DiabetesMiracleCureReviewIt/
https://www.rebelmouse.com/BTVSoloReviewIt/
https://www.rebelmouse.com/TheBloodPressureSolutionHere/
https://www.linkedin.com/groups/Navajo-Hearing-System-Review-Is-8258229.S.5974195853718548482
https://www.facebook.com/pages/FAP-Turbo-Review-Download-PDF-Ebook-Video/1379866515662439
https://www.linkedin.com/groups/Jamorama-Review-Is-it-Scam-8258229.S.5974230672791912449
https://www.rebelmouse.com/AutoBinarySignalsReviews/
https://www.facebook.com/pages/Phone-Detective-Review-Download-PDF-Ebook-Video/392598890912497
https://www.facebook.com/pages/Sistema-Venus-Revision-Descargar-PDF-Ebook-vídeo/1596140553953387
https://www.facebook.com/pages/Fat-Loss-Factor-Review-Download-PDF-Ebook-Video/1397458830563423
https://www.rebelmouse.com/CBPassiveIncomeReview/

[ Reply ]


opinion (posted by Joey C. Arrant, Fri 20 Feb 2015 06:22:54 PM UTC)

This kind of warantees comes with the network of signature (no, I will not detail that here, check gpg doc, it will explain it to you more clearly than I possibly could). https://www.facebook.com/WatchTheSpongeBobMovieSpongeOutofWaterOnline
https://www.rebelmouse.com/WatchUnfinishedBusinessOnline/
https://www.facebook.com/WatchTheDuffOnlineNow
https://www.rebelmouse.com/SecondBestExoticMarigoldHotel/
https://www.facebook.com/pages/Watch-Jupiter-Ascending-Online-Movie2k-Novamov-Megashare/845601398834134
https://www.facebook.com/pages/Watch-Fifty-Shades-of-Grey-Streaming-Online-for-Free-2015/321244681407709
https://www.facebook.com/WatchFiftyShadesofGreyOnline
https://www.facebook.com/WatchProjectAlmanacOnline
https://www.facebook.com/pages/Watch-The-SpongeBob-Movie-Sponge-Out-of-Water-Megavideo/532679256871903
https://www.facebook.com/WatchUnfinishedBusinessOnlineNow
https://www.facebook.com/pages/Watch-The-Duff-Full-Movie-Online-Free-No-Download/770669816350951
https://www.rebelmouse.com/ProjectAlmanacWatchOnline/
https://www.facebook.com/WatchHotTubTimeMachine2Online
https://www.facebook.com/pages/Jupiter-Ascending-Watch-Free-Online-HD-Leaked/699144576878043
https://www.facebook.com/pages/Watch-Project-Almanac-Full-Movie-Online-Free-No-Download/710492712392462
https://www.facebook.com/pages/Watch-McFarland-USA-Online-Full-Movie/1403006243338109
https://www.rebelmouse.com/WatchTheDuffOnline/
https://www.facebook.com/pages/Watch-Hot-Tub-Time-Machine-2-Full-Movie-Online-Free-No-Download/1603320729901707
https://www.facebook.com/pages/Watch-Fifty-Shades-of-Grey-Streaming-Online-for-Free-2015/1555663148051682
https://www.facebook.com/pages/Kingsman-The-Secret-Service-Watch-Free-Online-HD-Leaked/336303216579797
https://www.rebelmouse.com/SeventhSonWatchOnline/
https://www.rebelmouse.com/SpongeBobMovieSpongeOutofWater/
https://www.facebook.com/pages/Watch-The-Lazarus-Effect-Full-Movie-Online-Free-No-Download/649818431796795
https://www.facebook.com/pages/Watch-Seventh-Son-Full-Movie-Online/1380597028918472
https://www.rebelmouse.com/WatchFocusOnline/
https://www.facebook.com/pages/Watch-The-Second-Best-Exotic-Marigold-Hotel-Online-Free-2015-Putlocker/1600449890178557
https://www.facebook.com/WatchChappieOnlineNow
https://www.rebelmouse.com/KingsmanTheSecretServiceWatch/
https://www.facebook.com/WatchFocusOnline
https://www.facebook.com/WatchTheDuffOnline

[ Reply ]


joki (posted by Agen Sbobet, Tue 17 Feb 2015 08:50:16 AM UTC)

kontes seo agen bola poker

Saya yakin Anda telah mendengar tentang orang-orang yang mendapatkan sejumlah konsisten dan signifikan uang melalui penggunaan olahraga Ibcbet jasa taruhan yang ditawarkan oleh perusahaan Agen Ibcbet tersebut. Hal ini tidak bisa dikaitkan dengan keberuntungan Agen Sbobet saja. Hal ini juga karena mereka mengikuti instruksi Tangkas Online yang mereka diberikan dan terus bertaruh dalamAgen Bola Tangkas rangka untuk menjaga diri mereka sendiri dalam kerangka permainan Tangkas Online Indonesia. Jika Anda bertaruh dalam berbagai olahraga Bola Tangkas, maka jangan khawatir karena perusahaan-perusahaan Agen Tangkas Online ini menawarkan layanan yang mengakomodasi semua jenis olahraga Situs Bola Tangkas serta gaya. Anda bahkan dapat bertaruh atas tim Poker Online, pemain individu dan bahkan untuk seluruh musim Dewa Poker untuk melihat mana yang mendapat nilai tertinggi di Agen Poker.

[ Reply ]


Raja (posted by Agen Sbobet, Tue 17 Feb 2015 08:39:20 AM UTC)

kontes seo agen bola poker

[ Reply ]


across your (posted by Paul Tretior, Tue 13 Jan 2015 09:09:47 AM UTC)

https://www.rebelmouse.com/BlackhatWatchOnline/
https://www.rebelmouse.com/WatchUnbrokenOnline/
https://www.facebook.com/WatchKingsmanTheSecretServiceOnline
https://www.facebook.com/WatchPenguinsofMadagascarOnlineNow
https://www.rebelmouse.com/KingsmanTheSecretServiceWatch/
https://www.facebook.com/WatchAmericanSniperOnlineNow
https://www.facebook.com/WatchUnbrokenOnline
https://www.facebook.com/WatchTheGamblerOnline
https://www.facebook.com/WatchWildCardOnline
https://www.facebook.com/WatchWildCardOnline
https://www.facebook.com/WatchProjectAlmanacOnline
https://www.facebook.com/WatchTaken3Online
https://www.rebelmouse.com/WatchTheHobbit3Online/
https://www.rebelmouse.com/StrangeMagicWatchOnline/
https://www.rebelmouse.com/WatchTheInterviewOnline/
https://www.facebook.com/WatchTheHobbit3TheBattleofTheFiveArmiesOnline
https://www.rebelmouse.com/WatchTaken3OnlineFree/
https://www.rebelmouse.com/WatchTheHungerGames3Mockingjay/
https://www.facebook.com/WatchTaken3Online
https://www.rebelmouse.com/WomaninBlack2AngelofDeathWatch/
https://www.facebook.com/WatchMortdecaiOnline
https://www.rebelmouse.com/SpongeBobMovieSpongeOutofWater/
https://www.rebelmouse.com/WatchInherentViceOnline/
https://www.facebook.com/WatchTheSpongeBobMovieSpongeOutofWaterOnline
https://www.facebook.com/WatchKingsmanTheSecretServiceOnline
https://www.rebelmouse.com/StrangeMagicWatchOnline/
https://www.facebook.com/WatchAnnieOnlineNow
https://www.rebelmouse.com/JupiterAscendingWatchOnline/
https://www.facebook.com/WatchWomaninBlack2AngelofDeathOnline
https://www.rebelmouse.com/WatchUnbrokenOnline/

[ Reply ]


Maybe not so clear but: (posted by Mathieu Roy, Fri 28 May 2004 02:38:20 PM UTC)

Beware, a gpg-signature of a file just proves it has been signed with a given key.

It is important to be sure that this key is owned by who you are thinking it is. This kind of warantees comes with the network of signature (no, I will not detail that here, check gpg doc, it will explain it to you more clearly than I possibly could).

Without this key network, it is still usefull to have gpg-key files signed: you will notice if a package as not been made by the usual lad for a specific project, so you'll know if there is something unusual.

[ Reply ]


GPG fingerprints (posted by Dylan William Hardison, Mon 10 May 2004 02:40:39 AM UTC)

It can be quite useful to put your
GPG fingerprint in your ~/.signature file,
having it propagate to all the mailing lists you frequent.

[ Reply ]


   

 

Start a New Thread:

You could post if you were logged in
Show feedback again

Back to the top


Powered by Savane 3.1-cleanup