[28621] in CVS-changelog-for-Kerberos-V5
krb5 commit: Better document how to verify PGP signature
daemon@ATHENA.MIT.EDU (Tom Yu)
Tue Oct 14 17:06:49 2014
Date: Tue, 14 Oct 2014 17:06:28 -0400
From: Tom Yu <tlyu@mit.edu>
Message-Id: <201410142106.s9EL6Sc2000345@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/fa4138c7853487105ab3c54e6d176c45eaf8b065
commit fa4138c7853487105ab3c54e6d176c45eaf8b065
Author: Tom Yu <tlyu@mit.edu>
Date: Tue Oct 14 14:31:09 2014 -0400
Better document how to verify PGP signature
Add text clarifying our unusual packaging of the PGP signature inside
a tar file.
ticket: 7927
target_version: 1.13
tags: pullup
doc/build/index.rst | 24 ++++++++++++++----------
1 files changed, 14 insertions(+), 10 deletions(-)
diff --git a/doc/build/index.rst b/doc/build/index.rst
index d89bcba..3416817 100644
--- a/doc/build/index.rst
+++ b/doc/build/index.rst
@@ -30,16 +30,20 @@ Obtaining the software
The source code can be obtained from MIT Kerberos Distribution page,
at http://web.mit.edu/kerberos/dist/index.html.
-The MIT Kerberos distribution comes in an archive file, generally named
-krb5-VERSION.tar, where *VERSION* is a placeholder for the major and minor
-versions of MIT Kerberos. (For example, MIT Kerberos 1.9
-has major version "1" and minor version "9".)
-
-The krb5-VERSION.tar contains a compressed tar file consisting of the
-sources for all of Kerberos (generally krb5-VERSION.tar.gz) and
-a PGP signature file for this source tree (generally
-krb5-VERSION.tar.gz.asc). MIT highly recommends that you verify
-the integrity of the source code using this signature.
+The MIT Kerberos distribution comes in an archive file, generally
+named krb5-VERSION-signed.tar, where *VERSION* is a placeholder for
+the major and minor versions of MIT Kerberos. (For example, MIT
+Kerberos 1.9 has major version "1" and minor version "9".)
+
+The krb5-VERSION-signed.tar contains a compressed tar file consisting
+of the sources for all of Kerberos (generally named
+krb5-VERSION.tar.gz) and a PGP signature file for this source tree
+(generally named krb5-VERSION.tar.gz.asc). MIT highly recommends that
+you verify the integrity of the source code using this signature,
+e.g., by running::
+
+ tar xf krb5-VERSION-signed.tar
+ gpg --verify krb5-VERSION.tar.gz.asc
Unpack krb5-VERSION.tar.gz in some directory. In this section we will assume
that you have chosen the top directory of the distribution the directory
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
