Signed md5sum file from now on
With the next release the md5sum file will be signed with the kb-m.com signature
From the next release on the md5sum file will be signed with a signature from kb-m.com. This will guarantee that this file was not manipulated.
To verify the signature of this md5sum file you need to:
1) Search for the GPG key reiner-AT-kb-m.com on a public keyserver
gpg --search-keys 'reiner-AT-kb-m.com'
The search result should look like:
(1) Reiner Jung <reiner-AT-kb-m.com>
2048 bit RSA key 37AF82F5, created: 2010-06-11
2) Import the GPG key reiner@kb-m.com on from a public keyserver:
To import the key from the GPG keyserver you need to use the
key-ID which you found with the search."
gpg --recv-key 37AF82F5
3) Now you can verify the md5sum file with the following command:
gpg --verify cid-VERSION-md5sum.txt.asc
Where the result must look like:
gpg: Signature made Fri 11 Jun 2010 12:14:29 PM CEST using RSA key ID 37AF82F5
gpg: Good signature from "Reiner Jung <reiner-AT-kb-m.com>
Comments