Re: Signed source, binaries, public key

On Saturday, November 15, 2014 06:00:54 PM Steve Dougherty wrote:
> On 11/15/2014 11:32 AM, Garrett Grimsley wrote:
> > Hi,
> > 
> > I just downloaded Freenet and I was wondering if you had any signatures
> > for
> > the source code or binaries, as well as a copy of your public key
> > somewhere.
> > 
> > Thank you!
> 
> There is a link to a signature for the installer on the download page
> [0], (windows here [1]) and all source archives, jars, and signatures
> for them are available here. [2] More recently the artifacts are also on
> GitHub. [3]
> 
> Recent releases are signed with
> 
> pub   4096R/00100D897EDBA5E0 2013-09-21 [expires: 2016-09-15]
>       Key fingerprint = 0046 195B 2DCA B176 D394  09CD 0010 0D89 7EDB A5E0
> uid               [  full  ] Steve Dougherty (operhiem1 Release Signing
> Key) <steve-kVTqj8yhOEv2eFz/[email protected]>
> sub   4096R/7BF0F7B36AC8B380 2013-09-21 [expires: 2016-09-15]
> 
> which is available on public key servers. I've also attached a copy.
> 
> Hope that helps,
> - Steve

Also, a release is marked in Git by a tag usually, and you can verify the 
signature of a tag by "git verify-tag <name-of-tag>".
(Don't forget that to get that particular signed tag, you have to make sure to 
actually check out the tag, and not  something including further commits after 
it. "git checkout <name-of-tag>")

_______________________________________________
Support mailing list
[email protected]
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:support-request-RdDMkVZAZeuJnvDnx1genB2eb7JE58TQ@public.gmane.org?subject=unsubscribe

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=n9rE
-----END PGP SIGNATURE-----