14-11-2010, 21:18
|
|
מנהל
|
|
חבר מתאריך: 26.07.08
הודעות: 6,473
|
|
|
אימות אמינות מפתח GPG
אני מנסה לבדוק את אמינות התמונה httpd-2.2.17.tar.gz שהורדתי דרך העמוד הזה.
אז הלכתי לפי החלק של Verify the integrity of the files:
1. הורדתי את ה-KEYS וביצעתי להם import.
2. עשיתי verify.
אני עכשיו חוזר על הפקודות הנ"ל ומראה את הפלט:
קוד:
~/Downloads$ gpg --import KEYS
gpg: WARNING: digest algorithm MD5 is deprecated
gpg: please see http://www.gnupg.org/faq/weak-digest-algos.html for more information
gpg: key 2719AF35: "Ben Laurie <ben@gonzo.ben.algroup.co.uk>" not changed
gpg: key A99F75DD: "Rodent of Unusual Size <coar@ACM.Org>" not changed
gpg: key 302DA568: "Rodent of Unusual Size (DSA) <coar@ACM.Org>" not changed
gpg: key 2C312D2F: "Rodent of Unusual Size <coar@ACM.Org>" not changed
gpg: key A0BB71C1: "Jim Jagielski <jim@jaguNET.com>" not changed
gpg: key 08C975E5: "Jim Jagielski <jim@apache.org>" not changed
gpg: key DD919C31: "sameer@c2.net" not changed
gpg: key 940A64BD: "Robert Hartill <robh@imdb.com>" not changed
gpg: key 631B5749: "Randy Terbush <randy@zyzzyva.com>" not changed
gpg: key 49A563D9: "Mark Cox <mjc@redhat.com>" not changed
gpg: key 2F90A69D: "Paul Sutton <paul@ukweb.com>" not changed
gpg: key BA20321D: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: key 26BB437D: "Ralf S. Engelschall <rse@engelschall.com>" not changed
gpg: key 45B91DF1: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: key 163751F5: "Dean Gaudet <dgaudet@arctic.org>" not changed
gpg: key EE65E321: "Martin Kraemer <martin@apache.org>" not changed
gpg: key FDE534D1: "Martin Kraemer <martin@apache.org>" not changed
gpg: key FDE534D1: "Martin Kraemer <martin@apache.org>" not changed
gpg: key EC140B81: "Dirk-Willem van Gulik <dirkx@webweaving.org>" not changed
gpg: key F08E012A: "Dean Gaudet <dgaudet@apache.org>" not changed
gpg: key F88341D9: "Lars Eilebrecht <lars@eilebrecht.org>" not changed
gpg: key 28AA55C5: "Daniel Lopez Ridruejo <ridruejo@apache.org>" not changed
gpg: key C808A7BF: "rbb@apache.org" not changed
gpg: key 06A14C05: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: key 00ADEBF5: "Marc Slemko <marcs@znep.com>" not changed
gpg: key 62C48B29: "Ask Bjoern Hansen <ask@apache.org>" not changed
gpg: key 10FDE075: "wrowe@covalent.net" not changed
gpg: key B55D9977: "William A. Rowe, Jr. <wrowe@rowe-clan.net>" not changed
gpg: key B96CD0C7: "Bill Stoddard <bill@wstoddard.com>" not changed
gpg: key 423FF2F1: "Paul J. Reder <rederpj@raleigh.ibm.com>" not changed
gpg: key 82AB7BD1: "Cliff Woolley <jwoolley@apache.org>" not changed
gpg: key 6BBA9D5D: "Cliff Woolley <jwoolley@apache.org>" not changed
gpg: key B0D5F771: "Cliff Woolley <jwoolley@virginia.edu>" not changed
gpg: key 37114B39: "Cliff Woolley <jwoolley@virginia.edu>" not changed
gpg: key 751D7F27: "Graham Leggett <minfrin@apache.org>" not changed
gpg: key 6D791A41: "Greg Ames <gregames@apache.org>" not changed
gpg: key E04F9A89: "Roy T. Fielding <fielding@gbiv.com>" not changed
gpg: key E2226795: "Justin R. Erenkrantz <jerenkrantz@apache.org>" not changed
gpg: key 2CF86427: "Ian Holsman <ianh@apache.org>" not changed
gpg: key 2CF86427: "Ian Holsman <ianh@apache.org>" not changed
gpg: key CC8B0F7E: "Aaron Bannert <abannert@kuci.org>" not changed
gpg: key 3A4E7AC9: "Brad Nicholes <bnicholes@novell.com>" not changed
gpg: key DE885DD3: "Sander Striker <striker@apache.org>" not changed
gpg: key E005C9CB: "Greg Stein <gstein@lyra.org>" not changed
gpg: key 8103A37E: "Andre Malo <nd@apache.org>" not changed
gpg: key 75A67692: "Erik Abele <erik@codefaktor.de>" not changed
gpg: key 2261D073: "Astrid Kessler (Kess) <kess@kess-net.de>" not changed
gpg: key 208F5064: "Joe Schaefer <joe@sunstarsys.com>" not changed
gpg: key 0300A2E9: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: key A879FCF5: "Gregory Trubetskoy (Grisha) <grisha@ispol.com>" not changed
gpg: key E76CF6D0: "Stas Bekman <stas@stason.org>" not changed
gpg: key 42721F00: "Paul Querna <chip@force-elite.com>" not changed
gpg: key F39B3750: "Colm MacCarthaigh <colm.maccarthaigh@heanet.ie>" not changed
gpg: key 311A3DE5: "Ruediger Pluem <rpluem@apache.org>" not changed
gpg: key 83E6AE0D: "Maxime Petazzoni (Bulix.org) <maxime.petazzoni@bulix.org>" not changed
gpg: key 40581837: "Nick Kew <nick@webthing.com>" not changed
gpg: key 152924AF: "Sander Temme <sander@temme.net>" not changed
gpg: key 7F4436ED: "Sander Temme <sander@temme.net>" not changed
gpg: key EC88A0BF: "Philip M. Gollucci <pgollucci@p6m7g8.com>" not changed
gpg: key 0E44CF0C: "Joe Orton <jorton@redhat.com>" not changed
gpg: key 4DAA1988: "Bojan Smojver <bojan@rexursive.com>" not changed
gpg: key 6F9522D8: "Issac Goldstand <margol@beamartyr.net>" not changed
gpg: key C232FD0F: "Eric Covener <ecovener@us.ibm.com>" not changed
gpg: key E55B0D0E: ""Guenter Knauf" ("CODE SIGNING KEY") <fuankg@apache.org>" not changed
gpg: key 39FF092C: "Jeff Trawick (CODE SIGNING KEY) <trawick@apache.org>" not changed
gpg: Total number processed: 65
gpg: w/o user IDs: 4
gpg: unchanged: 61
~/Downloads$ gpg --verify httpd-2.2.17.tar.gz.asc
gpg: Signature made Thu 14 Oct 2010 08:48:36 PM IST using RSA key ID 7F7214A7
gpg: Good signature from "William A. Rowe, Jr. <wrowe@rowe-clan.net>"
gpg: aka "William A. Rowe, Jr. <wrowe@apache.org>"
gpg: aka "William A. Rowe, Jr. <william.rowe@springsource.com>"
gpg: aka "William A. Rowe, Jr. <wrowe@vmware.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: B1B9 6F45 DFBD CCF9 7401 9235 193F 180A B55D 9977
Subkey fingerprint: 4962 0827 E32B C882 DC6B EF54 A348 B984 7F72 14A7
ההודעה שבסוף הפלט בלטה לי:
ציטוט:
|
WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
|
איך ניתן לוודא שהחתימה אכן שייכת לבעלים אלה?
ניסיתי לעקוב אחרי הכתוב כאן אבל כבר הסתבכתי.
אודה להדרכה קצרה... |
ראשי
צ'אט
מצב כלאיים
