Re: how to verify signatures??

DukeNM wrote:
> i notice very frequently when i have to download packages from the
> net.
>
> somewhere something called 'signature' or 'md5 sig'
>
> well i know what they are. but what should i be doing about them.
>
> i guess gotta do some verification of it, to check the integrity of
> the package which i am about to download. but could someone explain
> how this is done.

You can check a MD5 message digest with
md5sum filename
The MD5 sum has to be the same as on the net.
A file's MD5 sum changes when someone changed the file.

Emilio

"Emilio Dokter" <h.e.dokter02@donotspam.kpn.com> wrote in message
news:3F019CB2.8040906@donotspam.kpn.com...
> DukeNM wrote:
> > i notice very frequently when i have to download packages from the
> > net.
> >
> > somewhere something called 'signature' or 'md5 sig'
> >
> > well i know what they are. but what should i be doing about them.
> >
> > i guess gotta do some verification of it, to check the integrity of
> > the package which i am about to download. but could someone explain
> > how this is done.
>
> You can check a MD5 message digest with
> md5sum filename
> The MD5 sum has to be the same as on the net.
> A file's MD5 sum changes when someone changed the file.
>
> Emilio
>

FYI: more details > man md5sum

ken k