home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Columbia Kermit
/
kermit.zip
/
archives
/
gkermit_aix432-1_0_0_0.exe
/
gkermit-1.0.0.0.bff.asc
< prev
Wrap
Text File
|
2000-11-22
|
3KB
|
82 lines
What is this file?
==================
This file contains a PGP signature that allows the origin of the
associated LPP to be verified before installing it.
If the PGP signature is correct, then there is a good level
of confidence that the LPP was produced by the owner of the
PGP signature. You will have to decide for yourself whether
you believe the signature belongs to me, Ciaran.Deignan@bull.net.
The PGP signature does not provide any real assurance that
the contents is safe, just that the LPP hasn't been tampered
with. If a PGP signature was distributed with the original
source code, then this signature was probably checked, but
there is no way to propigate the signature of the original
author to the binary distribution.
What if PGP is not available?
=============================
PGP provides a pretty-good tamper-proof verification. If PGP is not
available the following checksums can be used, but be warned, these
are not tamper-proof at all.
The md5 checksum for gkermit-1.0.0.0.bff is:
MD5 (gkermit-1.0.0.0.bff) = 405b35b01f470dd5079054b2ef70d3d9
The md5 checksum tool may be obtained from ftp://ftp.cert.org.
The sum(1) checksum for gkermit-1.0.0.0.bff is:
12815 250
How to perform the PGP verification
===================================
.asc (this file) is a PGP signature file, using my public key.
My key may be available on some public key servers under the name:
Ciaran Deignan <Ciaran.Deignan@bull.net> (keyID: 0x22F02AED)
You may also find it at:
http://www-frec.bull.com/download/ciaran_deignan.pgp
Get my key and install it in your public key ring. Then use this
command to check the signature of gkermit-1.0.0.0.bff:
- using PGP v2:
pgp gkermit-1.0.0.0.bff.asc gkermit-1.0.0.0.bff
- using PGP v5
pgpv gkermit-1.0.0.0.bff.asc -o gkermit-1.0.0.0.bff
If the signatures don't match, gkermit-1.0.0.0.bff is suspect. Report
the problem to me <Ciaran.Deignan@bull.net>
The PGP software is available from several sources. The International
PGP home page is at http://www.pgpi.org/, and a precompiled smit-installable
binary for AIX 4 is available from http://www.bull.de/pub/
Ciaran Deignan <Ciaran.Deignan@bull.net>
Wed Nov 22 13:25:27 NFT 2000
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
MessageID: r1UQ8AY98Wua5vLqOs9vMt+KDhgXW8Wp
iQCVAwUAOhutJ6jFV28i8CrtAQGNLgQArhhsgJP5dEVLwtXP7xyuWedevXaZqfbW
rhACX8M8FvQQ8OtllB9482f7U20cnwLWX0pFjO0vidxAenyIAlwbYzpQ6oJbNkPw
/OdMjdDdhUp4AdcTsPrdIRg6TPKV5Z0PYdiJWsp4sanA5A+lTwlTBpQ3EgFPYnr7
uCRqWxQjsZE=
=cUtl
-----END PGP SIGNATURE-----