[Koha] Re: What is a .sig file?

Rick Welykochy wrote:

Hi,

I have downloaded koha/2.2.8 from the savannah site. Accompanying the source tarbal is a .sig file: ... What is it?

A detached GnuPG signature.

And how to I verify the source tarbal using it?

gpg koha-2.2.8.tar.gz.sig You'll need to download and import the key it was signed with first. Download to a file (e.g. blah.asc), and run gpg --import blah.asc. -- Paul <http://paulgear.webhop.net> -- Everyone who voted for slavery was free. Everyone who votes for abortion was born. That's how oppression works. -- Matt Evans, Harvard law student