http://www.gnu.org/ GnuPG ..  
Deutsch · English · Español · Français · Italiano    Mirrors    
Page Contents  
  
 
Home  
  
 
Download  
  
 
Documentation  
  
 
Related software  
  
 
Misc  
  
 

Integrity Check

In order to check that the version of GnuPG which you are going to install is an original and unmodified one, you can do it in one of the following ways.

 
  
 

Using gpg

If you already have a trusted version of GnuPG installed, you can simply check the supplied signature. For example to check the signature of the file gnupg-1.2.6.tar.bz2 you would use this command:

gpg --verify gnupg-1.2.6.tar.bz2.sig

This checks whether the signature file matches the source file. You should see a message indicating that the signature is good and made by that signing key. Make sure that you have the right key, either by checking the fingerprint of that key with other sources or by checking that the key has been signed by a trustworthy other key.

Never use a GnuPG version you just downloaded to check the integrity of the source - use an existing GnuPG installation.

 
  
 

Using md5sum

If you are not able to use an old version of GnuPG, you have to verify the MD5 checksum. Assuming you downloaded the file gnupg-1.2.6.tar.bz2, you would run the md5sum command like this:

md5sum gnupg-1.2.6.tar.bz2

and check that the output matches the MD5 checksum reported on this site. An example of md5sum checksum is:

b1890f5dfacd2ba7ab15448c5ff08a4e gnupg-1.2.6.tar.bz2

If a SHA-1 checksum has been listed for the package and the command sha1sum is available on your system, you should prefer the SHA-1 checksum over MD5. Both commands are similar; sha1sum just uses a different algorithm and prints 8 more characters.

To be sure that this page has not been tampered, you may want to
compare the list below with the one included in the announcement mail posted to several mailing list.
verify HTML source code with GnuPG.

 
  
 

SHA1 Sum Summary

For your convenience, all SHA-1 sums available for software that can be downloaded from our site, have been gathered below.

4bc72a7307c4d57618cdba48ad0c6148c1f00a74  gnupg-1.2.6.tar.bz2
513aef2bb933f029570e1ed11cb69665a08e661a  gnupg-1.2.6.tar.gz
464bb0cd48fb39e7694a5c0179ef1570892df458  gnupg-1.2.5-1.2.6.diff.gz
 
  
 

MD5 Sum Summary

For your convenience, all MD5, sums available for software that can be downloaded from our site, have been gathered below.

b1890f5dfacd2ba7ab15448c5ff08a4e  gnupg-1.2.6.tar.bz2
56b10a6f444fff2565f4d960a11b2206  gnupg-1.2.6.tar.gz
3d5199fd729e2cf254a267c6935eeeaf  gnupg-1.2.5-1.2.6.diff.gz
3d93d73942117c4c0182cb15e01de70f  gnupg-w32cli-1.2.5.zip
 
  
 
 

Copyright (C) 2002-2004 Free Software Foundation, Inc.

Written by Werner Koch (2004-08-26 17:14).
Generated with WML 2.0.8 (30-Oct-2001) on 2004-11-18 22:34:31
from source file integrity_check.wml, $Revision: 1.17 $, $Date: 2004/10/12 21:14:53 $
Site designed by LoLo

For any question, please, follow these directions


  Technical resources for this
project are sponsered by
Site sponsored by  
   

Valid XHTML 1.0!     Peace!     Valid CSS!