Mention that the keys likely to have signed the distribution are now

listed on the web site for easy finding and downloading
This commit is contained in:
Mark J. Cox 2004-11-30 14:34:16 +00:00
parent 5073ff0346
commit e6e1f4cb5e

3
FAQ
View File

@ -152,7 +152,8 @@ Use MD5 to check that a tarball from a mirror site is identical:
md5sum TARBALL | awk '{print $1;}' | cmp - TARBALL.md5 md5sum TARBALL | awk '{print $1;}' | cmp - TARBALL.md5
You can check authenticity using pgp or gpg. You need the OpenSSL team You can check authenticity using pgp or gpg. You need the OpenSSL team
member public key used to sign it (download it from a key server). Then member public key used to sign it (download it from a key server, see a
list of keys at <URL: http://www.openssl.org/about/>). Then
just do: just do:
pgp TARBALL.asc pgp TARBALL.asc