summaryrefslogtreecommitdiffstats
path: root/site/download/index.php
diff options
context:
space:
mode:
authorFrancis Rowe <info@gluglug.org.uk>2015-05-16 21:27:06 (EDT)
committer Francis Rowe <info@gluglug.org.uk>2015-05-16 21:27:06 (EDT)
commit8418b50d8bb288107592e7badf0ce20647f1a249 (patch)
tree7c2fceaab4af3d839910d4e4935c06e2620cb74d /site/download/index.php
parent2867a2e4a7ab4c8527e58b1cc5bf531c688f15a5 (diff)
downloadlibreboot.org-8418b50d8bb288107592e7badf0ce20647f1a249.zip
libreboot.org-8418b50d8bb288107592e7badf0ce20647f1a249.tar.gz
libreboot.org-8418b50d8bb288107592e7badf0ce20647f1a249.tar.bz2
Update the instructions for how to use GPG
Diffstat (limited to 'site/download/index.php')
-rw-r--r--site/download/index.php17
1 files changed, 15 insertions, 2 deletions
diff --git a/site/download/index.php b/site/download/index.php
index e430346..86af57c 100644
--- a/site/download/index.php
+++ b/site/download/index.php
@@ -73,9 +73,22 @@
Download the key:<br/>
$ <b>gpg --recv-keys <?php echo $lbProjectGpgKeyID; ?></b>
</p>
+
+ <p>
+ Download the SHA512 manifest and it's corresponding GPG signature
+ for the release that you are using, and put them in a directory.
+ Put the src, util and docs archives in the root of that directory,
+ alongside the SHA512 manifest file.
+ Put your ROM image archives under <i>rom/</i> in that directory.
+ Put your crossgcc tarballs under <i>crossgcc/</i> in that directory.
+ </p>
+ <p>
+ After you've done this, verify the SHA512 checksums:<br/>
+ $ <b>sha512sum -c sha512sum.txt</b>
+ </p>
<p>
- You can verify the downloaded archives as follows:<br/>
- $ <b>for signature in $(ls *.sig); do gpg --verify $signature; done</b>
+ You can verify the downloaded SHA512 manifest as follows:<br/>
+ $ <b>gpg --verify sha512sum.txt.gpg</b>
</p>
</div>