Installing the latest GPG: Difference between revisions

From Sidiprojects Wiki
Jump to navigation Jump to search
mNo edit summary
Line 12: Line 12:
== Verify ==
== Verify ==


* verify the integrity by issuing this command
* verify the integrity by issuing this command. (This ensures that the file is unchanged from the source, but of course it guarantees nothing about the program itself. Trusting a source is a separate, and tricky question). Continue to check the integrity of the file only if you decide that you trust the maintainers of GPG:
   sha1sum gnupg-2.0.27.tar.bz2
   sha1sum gnupg-2.0.27.tar.bz2
(substitute the name of the file you downloaded for gnupg-2.0.27/tar.bz2 above), and checking the result against the list of checksums [https://www.gnupg.org/download/integrity_check.html here]. If this does not go perfectly, figure out what happened and fix it; '''do not just carry on'''.
(substitute the name of the file you downloaded for gnupg-2.0.27/tar.bz2 above), and checking the result against the list of checksums [https://www.gnupg.org/download/integrity_check.html here]. If this does not go perfectly, figure out what happened and fix it; '''do not just carry on'''.

Revision as of 20:49, 17 June 2016

The package provided with your favorite GNU/Linux distro., or in MacPorts, may not be the latest. This matters, so get the latest one directly! The instructions for doing so are provided here.

Downloads

do this first, then we'll build

  • Create the install directory, inserting the desired parent directory for the build directory for PARENT_DIR:
 cd PARENT_DIR && mkdir gpg_build
  • Get the latest stable version of gpg here
 wget https://www.gnupg.org/download

Verify

  • verify the integrity by issuing this command. (This ensures that the file is unchanged from the source, but of course it guarantees nothing about the program itself. Trusting a source is a separate, and tricky question). Continue to check the integrity of the file only if you decide that you trust the maintainers of GPG:
 sha1sum gnupg-2.0.27.tar.bz2

(substitute the name of the file you downloaded for gnupg-2.0.27/tar.bz2 above), and checking the result against the list of checksums here. If this does not go perfectly, figure out what happened and fix it; do not just carry on.

Expand and Build

  • To expand the archive, do
 tar xjvf gnupg-2.0.27.tar.bz2