Re: [be] Verification of release tar balls

[John Marshall]

On 28/09/2010 02:51, Teus Benschop wrote:
> The GnuPG key-pair was generated and the public key was uploaded to
> hkp://keys.gnupg.net. Its ID is 71D6A5C6. The detached signature was
> created, and was uploaded to the directory where the tar ball is. This
> should give the possibility of verifying the tar balls that they are
> good.

Thank you Teus.

rwpc12> ls -l bibledit-gtk-4.1.tar.gz*
-rw-r--r--  1 john  john  12338213 28 Sep 11:28 bibledit-gtk-4.1.tar.gz
-rw-r--r--  1 john  john       490 28 Sep 02:29 bibledit-gtk-4.1.tar.gz.asc

rwpc12> gpg -v --verify bibledit-gtk-4.1.tar.gz.asc bibledit-gtk-4.1.tar.gz
Version: GnuPG v1.4.10 (GNU/Linux)
gpg: armor header: 
gpg: Signature made Tue Sep 28 02:29:33 2010 AEST using RSA key ID 71D6A5C6
gpg: using PGP trust model
gpg: Good signature from "Teus Benschop <address@hidden>"
gpg: binary signature, digest algorithm SHA1

-- 
John Marshall