[Koha] Re: What is a .sig file?

[Paul Gear]

Rick Welykochy wrote:
> Hi,
> 
> I have downloaded koha/2.2.8 from the savannah site.
> Accompanying the source tarbal is a .sig file:
> ...
> What is it?

A detached GnuPG signature.

> And how to I verify the source tarbal using it?

gpg koha-2.2.8.tar.gz.sig

You'll need to download and import the key it was signed with first.
Download to a file (e.g. blah.asc), and run gpg --import blah.asc.

-- 
Paul
<http://paulgear.webhop.net>
--
Everyone who voted for slavery was free. Everyone who votes for abortion
was born. That's how oppression works.
    -- Matt Evans, Harvard law student

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://lists.katipo.co.nz/pipermail/koha/attachments/20070409/bb22bbe5/signature.pgp