diff options
| author | Francis Rowe <info@gluglug.org.uk> | 2015-05-16 21:27:06 (EDT) |
|---|---|---|
| committer | Francis Rowe <info@gluglug.org.uk> | 2015-05-16 21:27:06 (EDT) |
| commit | 8418b50d8bb288107592e7badf0ce20647f1a249 (patch) | |
| tree | 7c2fceaab4af3d839910d4e4935c06e2620cb74d /site/download | |
| parent | 2867a2e4a7ab4c8527e58b1cc5bf531c688f15a5 (diff) | |
| download | libreboot.org-8418b50d8bb288107592e7badf0ce20647f1a249.zip libreboot.org-8418b50d8bb288107592e7badf0ce20647f1a249.tar.gz libreboot.org-8418b50d8bb288107592e7badf0ce20647f1a249.tar.bz2 | |
Update the instructions for how to use GPG
Diffstat (limited to 'site/download')
| -rw-r--r-- | site/download/index.php | 17 |
1 files changed, 15 insertions, 2 deletions
diff --git a/site/download/index.php b/site/download/index.php index e430346..86af57c 100644 --- a/site/download/index.php +++ b/site/download/index.php @@ -73,9 +73,22 @@ Download the key:<br/> $ <b>gpg --recv-keys <?php echo $lbProjectGpgKeyID; ?></b> </p> + + <p> + Download the SHA512 manifest and it's corresponding GPG signature + for the release that you are using, and put them in a directory. + Put the src, util and docs archives in the root of that directory, + alongside the SHA512 manifest file. + Put your ROM image archives under <i>rom/</i> in that directory. + Put your crossgcc tarballs under <i>crossgcc/</i> in that directory. + </p> + <p> + After you've done this, verify the SHA512 checksums:<br/> + $ <b>sha512sum -c sha512sum.txt</b> + </p> <p> - You can verify the downloaded archives as follows:<br/> - $ <b>for signature in $(ls *.sig); do gpg --verify $signature; done</b> + You can verify the downloaded SHA512 manifest as follows:<br/> + $ <b>gpg --verify sha512sum.txt.gpg</b> </p> </div> |