Installing the latest GPG: Difference between revisions

From Sidiprojects Wiki
Jump to navigation Jump to search
m (note mentioning this is incomplete)
 
(4 intermediate revisions by the same user not shown)
Line 1: Line 1:
The package provided with your favorite GNU/Linux distro., or in MacPorts, may not be the latest. This matters, so get the latest one directly! The instructions for doing so are provided here.
Note: This is a careful way of installing GPG. There are simpler ways to use OpenPGP that are less secure, but may be better for you if you're not comfortable on the command line. For example, you may want to look at [https://mailvelope.com mailvelope] for OpenPGP integration with Gmail.
 
That said, if you can do it this way, it is better. In particular, the package provided with your favorite GNU/Linux distro., or in MacPorts, may not be the latest. This matters, so get the latest one directly! The instructions for doing so are provided here.
'''CURRENTLY INCOMPLETE'''


== Downloads ==
== Downloads ==
'' do this first, then we'll build ''
'' do this first, then we'll build ''


* Get [ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-2.0.27.tar.bz2 the archive] and also [ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-2.0.27.tar.bz2.sig the signature]
* Create the install directory, inserting the desired parent directory for the build directory for PARENT_DIR:
  cd PARENT_DIR && mkdir gpg_build
 
* Get the latest stable version of gpg [https://www.gnupg.org/download/ here]
  wget https://www.gnupg.org/download
 
== Verify ==
 
* verify the integrity by issuing this command. (This ensures that the file is unchanged from the source, but of course it guarantees nothing about the program itself. Trusting a source is a separate, and tricky question). Continue to check the integrity of the file only if you decide that you trust the maintainers of GPG:
  sha1sum gnupg-2.0.27.tar.bz2
(substitute the name of the file you downloaded for gnupg-2.0.27/tar.bz2 above), and checking the result against the list of checksums [https://www.gnupg.org/download/integrity_check.html here]. If this does not go perfectly, figure out what happened and fix it; '''do not just carry on'''.
 
== Expand and Build ==
 
* To expand the archive, do
  tar xjvf gnupg-2.0.27.tar.bz2

Latest revision as of 21:41, 12 September 2016

Note: This is a careful way of installing GPG. There are simpler ways to use OpenPGP that are less secure, but may be better for you if you're not comfortable on the command line. For example, you may want to look at mailvelope for OpenPGP integration with Gmail.

That said, if you can do it this way, it is better. In particular, the package provided with your favorite GNU/Linux distro., or in MacPorts, may not be the latest. This matters, so get the latest one directly! The instructions for doing so are provided here. CURRENTLY INCOMPLETE

Downloads

do this first, then we'll build

  • Create the install directory, inserting the desired parent directory for the build directory for PARENT_DIR:
 cd PARENT_DIR && mkdir gpg_build
  • Get the latest stable version of gpg here
 wget https://www.gnupg.org/download

Verify

  • verify the integrity by issuing this command. (This ensures that the file is unchanged from the source, but of course it guarantees nothing about the program itself. Trusting a source is a separate, and tricky question). Continue to check the integrity of the file only if you decide that you trust the maintainers of GPG:
 sha1sum gnupg-2.0.27.tar.bz2

(substitute the name of the file you downloaded for gnupg-2.0.27/tar.bz2 above), and checking the result against the list of checksums here. If this does not go perfectly, figure out what happened and fix it; do not just carry on.

Expand and Build

  • To expand the archive, do
 tar xjvf gnupg-2.0.27.tar.bz2