X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=doc%2Fintegrity.texi;h=fcc114a9da97e21850ac339870599a0bee8aa7a6;hb=18de9cc50e2f08382295f7a44b5668262a19ec4b;hp=faea7c49ba6219aaf46693227e48a8da05db16fa;hpb=11516a2bbce2b39bda71cf716eaeaf1ffb62314a;p=nncp.git diff --git a/doc/integrity.texi b/doc/integrity.texi index faea7c4..fcc114a 100644 --- a/doc/integrity.texi +++ b/doc/integrity.texi @@ -1,4 +1,10 @@ @node Integrity +@cindex integrity check +@cindex authenticity check +@cindex OpenPGP +@cindex gpg +@cindex GnuPG +@cindex WKD @section Tarballs integrity check You @strong{have to} check downloaded archives integrity and verify @@ -19,17 +25,18 @@ uid NNCP releases @itemize @item -@verbatim +@example $ gpg --auto-key-locate dane --locate-keys releases at nncpgo dot org -$ gpg --auto-key-locate wkd --locate-keys releases at nncpgo dot org -@end verbatim +$ gpg --auto-key-locate wkd --locate-keys releases at nncpgo dot org +@end example @item -@verbatiminclude .well-known/openpgpkey/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc +@verbatiminclude .well-known/openpgpkey/nncpgo.org/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc @end itemize Then you could verify tarballs signature: -@verbatim -$ gpg --verify nncp-5.1.2.tar.xz.sig nncp-5.1.2.tar.xz -@end verbatim + +@example +$ gpg --verify nncp-@value{VERSION}.tar.xz.sig nncp-@value{VERSION}.tar.xz +@end example