MD5SUM File ISO signature checking ??

Wed, 03 Apr 2002 14:13:04 -0800

            Hi Debian-cd,

 

I downloaded all 4 CD images from a site.

 

I want to check these CDs to be sure they are officials.

 

The file MD5SUM seems to contain MD5 for each four CD ISO images. (I checked, it’s OK)

 

This file is signed. How can I check the signature ?

 

When I type gpg –verify MD5SUM it replies

Gpg : signature made Mon Jan 21 2002 CED using DSA key ID 88C7C1F7.

Can’t check signature : public key not found

 

So, where can I find that public key ?

It seems different than the key ftp_master 1024D/722F1AED used to sign Releases.gpg using apt.

 

I want to be far more certain these images come from DEBIAN and not from FBI ! that’s what digital signatures are intended for …

 

mulder, scully mayday !!!

 

Thank you in advance

 

 

 

 

Reply via email to