Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 26 Apr 2003 03:02:25 +0200
From:      Martin Karlsson <mk-freebsd@bredband.net>
To:        Michelle Weeks <tristan11@mindspring.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: using gpg to verify signatures
Message-ID:  <20030426010225.GA78181@c-49c170d5.bredbandsbolaget.se>
In-Reply-To: <5A57C550-75B4-11D7-995E-000393843210@mindspring.com>
References:  <5A57C550-75B4-11D7-995E-000393843210@mindspring.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

* Michelle Weeks <tristan11@mindspring.com> [2003-04-23 10.52 -0700]:
> i'm trying to learn how to verify signatures.  i have downloaded and  
> installed gnupg.  i have also downloaded the cvs.patch and  
> cvs.patch.asc   
> ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA- 
> 03:01.cvs.asc and would like to verify the signature.  my rough  
> understanding from the gnupg documentation is that i need to import the  
> public key into my public keyring before i can use gpg --verify to  
> verify the signature.  i believe that i should use gpg --import "public  
> key file".  how do i get the public key for the cvs.patch?

Security Advisories are signed with the FreeBSD Security Officer PGP 
key.  You'll find it at:
<URL:ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/public_key.asc >

More security information can be found at:
<URL:http://www.freebsd.org/security/index.html >

HTH,
-- 
Martin Karlsson



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030426010225.GA78181>