如何安裝 cvsup ?? - BBS

謝謝你提供的資訊, 從這個資訊搜尋找到這頁,
看來GnuPG, 是個不錯的軟體, 可拿來verify the integrity
http://httpd.apache.org/dev/verification.html

用portupgrade -NR gnupg 灌完後
http://httpd.apache.org/dev/verification.html
這頁也剛好有範例可看...

原本灌的PGP6.5,
則是看了man後, 還是不知道怎麼verify, 放棄!!
(其實應該說PGP的public key, 沒像GnuPG那樣可以容易的下載安裝,
光找public key就不知道要怎麼找 >"<)


※ 引述《[email protected] (悲しみを恐れない)》之銘言：
: ※ 引述《[email protected] (........)》之銘言：
: > 但是我不知道怎麼verify >"<
: > 裝了PGP 6.5, 也沒看到教我怎麼用,
: > 網路上也沒找到資訊, 也許是我眼拙沒看到啦,
: > 雖然說不verify還是可以path啦, 但還是希望知道的大大告知ㄧ下
: > 不verify總是毛毛的 >"<
: 網路上的說明多到爆吧？以 Apache 網頁上面的說明為例...
: Verify the integrity of the files
: It is essential that you verify the integrity of the downloaded files using
: the PGP or MD5 signatures. Please read Verifying Apache HTTP Server Releases
: for more information on why you should verify our releases.
: The PGP signatures can be verified using PGP or GPG. First download the KEYS
: as well as the asc signature file for the relevant distribution. Make sure
: you get these files from the main distribution directory, rather than from a
: mirror. Then verify the signatures using
: % pgpk -a KEYS
: % pgpv apache_1.3.24.tar.gz.asc
: or
: % pgp -ka KEYS
: % pgp apache_1.3.24.tar.gz.asc
: or
: % gpg --import KEYS
: % gpg --verify apache_1.3.24.tar.gz.asc
: httpd-2.0.55.tar.gz is signed by William Rowe 10FDE075
: httpd-1.3.36.tar.gz is signed by Jim Jagielski 08C975E5
: Alternatively, you can verify the MD5 signature on the files. A unix program
: called md5 or md5sum is included in many unix distributions. It is also
: available as part of GNU Textutils. Windows users can get binary md5 programs
: from here, here, or here.

--