adding README with instructions for signing/verifying packages

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
This commit is contained in:
Eric F Crist 2012-06-27 08:26:50 -05:00
parent 776cffbf9e
commit 6bbe933bbf

13
README Normal file
View File

@ -0,0 +1,13 @@
SIGNING:
$ gpg -a -b [file]
VERIFY SIGNATURE:
We sign easy-rsa packages with a GPG private key. The public key is available
in the git repository (PUBLIC_KEY) as well as on various GPG/PGP public key
servers around the net.
To verify the package signature download and import our public key into GPG:
$ gpg --import pubkey.txt
Then download and verify the signature:
$ gpg -v --verify [file].asc
Note that the [file].asc and tarball need to be in the same directory.