Deutsch · English · Español · Français · Italiano    Mirrors    
Page Contents  
Related software  

Integrity Check

In order to check that the version of GnuPG which you are going to install is an original and unmodified one, you can do it in one of the following ways.


Using gpg

If you already have a trusted version of GnuPG installed, you can simply check the supplied signature. For example to check the signature of the file gnupg-1.4.7.tar.bz2 you would use this command:

gpg --verify gnupg-1.4.7.tar.bz2.sig

This checks whether the signature file matches the source file. You should see a message indicating that the signature is good and made by that signing key . Make sure that you have the right key, either by checking the fingerprint of that key with other sources or by checking that the key has been signed by a trustworthy other key.

Never use a GnuPG version you just downloaded to check the integrity of the source - use an existing GnuPG installation.


Using sha1sum

If you are not able to use an old version of GnuPG, you have to verify the SHA1 checksum. Assuming you downloaded the file gnupg-1.4.7.tar.bz2, you would run the sha1sum command like this:

sha1sum gnupg-1.4.7.tar.bz2

and check that the output matches the SHA1 checksum reported on this site. An example of sha1sum checksum is:

22149105845c79068771837c8deb7d5ba0854927 gnupg-1.4.7.tar.bz2

To be sure that this page has not been tampered, you may want to compare the list below with the one included in the announcement mail posted to several mailing list.


SHA1 Sum Summary

For your convenience, all SHA1 sums available for software that can be downloaded from our site , have been gathered below.

22149105845c79068771837c8deb7d5ba0854927  gnupg-1.4.7.tar.bz2
77299e59995830736ea8dda17e970766504e6164  gnupg-1.4.7.tar.gz
0f258989008dbfd720dfeeb617d02cce2884aafe  gnupg-1.4.6-1.4.7.diff.bz2
b806e8789c93dc6d08b129170d6beb9e1a5ae68f  gnupg-w32cli-1.4.7.exe
4680bcb96873191b331252ae40b35e39589c58ca  gnupg-2.0.3.tar.bz2
7ab362ec505ed154b00408bb4fd902bf4773fcea  dirmngr-1.0.0.tar.bz2
c72406c69d6ad9fb3fa1e9824b04566cf204093b  libgcrypt-1.2.4.tar.bz2
d3c71afb8b88b1050067633cd8bcc4ca0bae696d  gpgme-1.1.4.tar.bz2

Copyright (C) 2002-2004 Free Software Foundation, Inc.

Written by Werner Koch (2004-08-26 17:14).
Generated with WML 2.0.8 (30-Oct-2001) on 2007-03-08 18:05:43
from source file integrity_check.wml, $Revision: 1.28 $, $Date: 2007/03/05 10:33:59 $
Site designed by LoLo

For any question, please, follow these directions

  Technical resources for this
project are sponsered by
Site sponsored by  

Valid XHTML 1.0!     Peace!     Valid CSS!