Convertigo package verification

Home Forums Convertigo Products Convertigo package verification

This topic contains 2 replies, has 2 voices, and was last updated by  Erwan 1 year ago.

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #210950

    Erwan
    Participant

    Hi,

    How use package vérification in command line for package downloaded from sourceforge.net

    thank you

    Best regards

    #210951

    Nicolas Albert
    Keymaster

    Hi,

    You need gpg to check files with their .asc.

    We use it for our official Docker image : https://github.com/convertigo/docker/blob/44b59de97f1bc69dd7d9ae35bc67277106825f96/7.4/7.4.8/Dockerfile#L95

    GPG needs to retrieve our public key :
    gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "6A7779BB78FE368DF74B708FD4DA8FBEB64BF75F"

    Retrieve the pair of file .zip .zip.asc, and verify the integrity :
    gpg --batch --verify <convertigo_file>.zip.asc <convertigo_file>.zip

    GPG is available in many Linux package manager and can be installed on Windows : https://gpg4win.org/download.html

    #210953

    Erwan
    Participant

    thank you for Convertigo Public key.

    Perfectly working for me

    gpg2 –keyserver ha.pool.sks-keyservers.net –keyserver-options “http-proxy=http://${PROXY_USERNAME}:${PROXY_PASSWORD}@${PROXY_SERVER}:${PROXY_PORT}” –recv-keys “6A7779BB78FE368DF74B708FD4DA8FBEB64BF75F”
    gpg2 –verify ./convertigo-7.4.8-v44478-linux64.war.asc ./convertigo-7.4.8-v44478-linux64.war

    Best regards

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.