-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, The first time you install you have to use a tool that can generate a hash of the downloaded package. You can then compare that hash with the one on the webpage to know that the package downloaded is the same one the website says it is.
For example, Download the GPGTools installer Next to the green arrow you will see a link to sha Open terminal on the mac (I'm assuming you are on a mac) Navigate to your downloads folder Usually "cd Downloads" Enter the command "openssl sha1 [filename]" where filename is the name of the file you downloaded compare the result given with the checksum value given on the website. This will let you know if the file you downloaded has been altered. However, it doesn't tell you if the website itself has been compromised. Russell On Apr 25, 2011, at 6:25 PM, Steven Taracevicz wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > hello Roman: > > I have both the download and the signature files. > > How do I check that the download has the correct signature on my Mac? > > I apologize for the question, I cannot seem to find the information. > > Many thanks, > Steven > > > On Apr 22, 2011, at 12:33 AM, Roman Zechmeister wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA512 >> >> Hi Steven, >> >> no. >> First you must download the file, then you can check the signature. >> The signature-file is listed under the green download arrow. >> >> >> Regards, Roman >> >> >> Am 22.04.2011 um 02:47 schrieb Steven Taracevicz: >> >>> i should verify before downloading, correct? >>> >>> many thanks, >>> Steven >> -----BEGIN PGP SIGNATURE----- >> >> iQIcBAEBCgAGBQJNsS80AAoJENqHDBNGqVewIE0P/0pq4bTLzqot7+Fx0qCb73Fx >> aH5c8RJ3bg9bgaGh84oxRapjdkA5W29QeO9OOyTtd8Qu4OOJnfEeYAyWyIsKeBSe >> jk1qvyjmEjeiMITS6MNmsju35E6GhylI+iocl6U/FndSy2uzKPmJ41d3DiNCG7Yi >> PP84iAMw15X6c5Ebc5VQGpwpO6vSrl8jjO50zgmf1Gqqb4X8sKqKOIdHH0SNZnOd >> zIxQ+RJE9qyuUVUMbToq/bnL3MeYVRHf9R66n4L4ifenS6pi2NtG24ZvBOwWXSQJ >> PS+vhTb9fRhK/h6axkNTYV36QgvF0tOk9Ap0b/Y3wA6uc/+/VOOaJTjM3+W41P06 >> JkLHq4keybetlAWRyCbWYGACVK2701B3xIMBw/8ZXk0BqkZY/KxCalGZg4n2YJzi >> Kor3nmxluJy29DNOhjkYbJZdpmW3XI769kqMGF7wF/UlWmkE+Sd05Wv+8tieHoOm >> 6YcETNsO6y0X73vUt1COPDpMzQmPV8LUwbTuNHx0b6k/uVS0iQ6klJ5PT85pV33b >> 73Z5IIbpKOEDFPmSKLw5IolBnxL+S7egDlbVZ/UjYXkaSvRzEq+klwppWSAe2GMt >> E6Fq9ihu6SFPGXTeNnNuI5pkCo6rWuXzLEnhHNvFRj11zEYrGb1U5os2wlD90U+h >> Eit16X+2X30ZHrO9oHAZ >> =Fubo >> -----END PGP SIGNATURE----- > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.17 (Darwin) > Comment: GPGTools - http://gpgtools.org > > iQIcBAEBAgAGBQJNth8ZAAoJEMVuDeZFutRMxCwP/jPic9p8mFh5DCgaQrjNoC8z > lgd/C1tw+n1ppDQ1GFovNd8n3HTUxevW2y7Sp5j4yVRtIiHTdTJilsx24grMmDO/ > oyIFsbeU/cm3Bk3CMv8NA7RVtTRGpDb6IRPmxdsmleo9P7DFMhnudO4uKKUHNtS8 > efPLtA2SWvIUMWsCU+Alj0r5weeqRFfU3RsQgDvm/S8flfXNo/jnqmMCN0b9v1I1 > PpM4cee0eBlkotT24qG7RSJj0GdsC4/SbS8E4kR3N7YF/9jMyA+vO8fgJrQqJO6A > OACAKYOyuN7LkkOt0W0q4wiG9ma4asTkZZqK0hEEjCKmmzX/GucDLZA3RVu137Nk > J9G3DulnhwV5dO+pSWWPqnyIsyc8qrkTl6LeONcssvoPGOWvCdUkB5V/YtKOqc+I > YzUo90XaTW0+Iy+P1PYOdx8ga4IOQwVtJVYdS1vEk5JHY9raCfXtA0p6PIyt/bUR > DnX2MDrxzk9j4mHTD9MKhP5KJJttGcKf9ezQkbyvTZIimgtjJalf0oPHodbMv15Q > vUakxuXmmQxWIK69ceMVySLun8TNX1FqonmLqjdS0n99W99GGzKdZ4xTvz7tKZY2 > 6BJe7pr4+2BjdOWVqqyvp5jORC4gZF0MtiOUYAwxRtWHjEVFye3dwlQigJgvv7uM > fPpfQhXHAPxDvmNpcJhp > =w/qW > -----END PGP SIGNATURE----- > > _______________________________________________ > gpgtools-users mailing list > [email protected] > FAQ: http://www.gpgtools.org/faq.html > Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users > Unsubscribe: > http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 > > This email sent to: [email protected] -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJNti+7AAoJENd/BvSWh4iFae0IAITrb3grJnHsVGbxuAjWLXka xfSDfo2D5/0FNwaBx4jFhyYk/QYHjYb/YE9NdQKYdOrmokQGl3oOibkXBtxxH2/z UwLG5t2pRAHvfzHDy6nxBeld28PaB23Zy26D3Twd+eIZLiIxZyZyF1oeEl1hKbe6 UjO13+EjGm3BMPo6KRrJrT4f3PbGD3Bbff4pUmdav3UVO1FtDNow12qFWuG3Aaxk kOT8lPF8Z+nKb85xigyWvVHMZJIF52CBYWxDlP6kBHd8Kmy8SYRBFGveWfzx0sQP O5BM6ZNpoEHe7aW3Cg/2IKJwQqYlyVUKjNJHDoTHhAYIksbCOLNaM9iwAEZ+C1g= =DvEE -----END PGP SIGNATURE----- _______________________________________________ gpgtools-users mailing list [email protected] FAQ: http://www.gpgtools.org/faq.html Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users Unsubscribe: http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1 This email sent to: [email protected]
