From owner-freebsd-questions@FreeBSD.ORG  Wed Apr 23 10:52:35 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E028537B404
	for <freebsd-questions@freebsd.org>;
	Wed, 23 Apr 2003 10:52:35 -0700 (PDT)
Received: from mclean.mail.mindspring.net (mclean.mail.mindspring.net
	[207.69.200.57])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 032C243F75
	for <freebsd-questions@freebsd.org>;
	Wed, 23 Apr 2003 10:52:31 -0700 (PDT)
	(envelope-from tristan11@mindspring.com)
Received: from h-68-164-21-219.snvacaid.covad.net ([68.164.21.219]
	helo=mindspring.com)
	by mclean.mail.mindspring.net with esmtp (Exim 3.33 #1)
	id 198OQ1-0001sb-00
	for freebsd-questions@freebsd.org; Wed, 23 Apr 2003 13:52:30 -0400
Date: Wed, 23 Apr 2003 10:52:30 -0700
Mime-Version: 1.0 (Apple Message framework v552)
Content-Type: text/plain; delsp=yes; charset=US-ASCII; format=flowed
From: Michelle Weeks <tristan11@mindspring.com>
To: freebsd-questions@freebsd.org
Content-Transfer-Encoding: 7bit
Message-Id: <5A57C550-75B4-11D7-995E-000393843210@mindspring.com>
X-Mailer: Apple Mail (2.552)
Subject: using gpg to verify signatures
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Apr 2003 17:52:36 -0000

i'm trying to learn how to verify signatures.  i have downloaded and  
installed gnupg.  i have also downloaded the cvs.patch and  
cvs.patch.asc   
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA- 
03:01.cvs.asc and would like to verify the signature.  my rough  
understanding from the gnupg documentation is that i need to import the  
public key into my public keyring before i can use gpg --verify to  
verify the signature.  i believe that i should use gpg --import "public  
key file".  how do i get the public key for the cvs.patch?

thank you,
michelle