easyrsa/README
Eric F Crist 6bbe933bbf adding README with instructions for signing/verifying packages
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2012-06-27 08:26:50 -05:00

14 lines
475 B
Plaintext

SIGNING:
$ gpg -a -b [file]
VERIFY SIGNATURE:
We sign easy-rsa packages with a GPG private key. The public key is available
in the git repository (PUBLIC_KEY) as well as on various GPG/PGP public key
servers around the net.
To verify the package signature download and import our public key into GPG:
$ gpg --import pubkey.txt
Then download and verify the signature:
$ gpg -v --verify [file].asc
Note that the [file].asc and tarball need to be in the same directory.