Author: arma Date: 2011-09-10 11:13:47 +0000 (Sat, 10 Sep 2011) New Revision: 25055
Modified: website/trunk/docs/en/verifying-signatures.wml Log: link to the signing keys page
and simplify the --verify line. i hope gpg works the same across platforms.
Modified: website/trunk/docs/en/verifying-signatures.wml =================================================================== --- website/trunk/docs/en/verifying-signatures.wml 2011-09-10 10:37:34 UTC (rev 25054) +++ website/trunk/docs/en/verifying-signatures.wml 2011-09-10 11:13:47 UTC (rev 25055) @@ -51,7 +51,9 @@ signatures. They allow you to verify the file you've downloaded is exactly the one that we intended you to get. For example, tor-browser-<version-torbrowserbundle>_en-US.exe is accompanied by - tor-browser-<version-torbrowserbundle>_en-US.exe.asc.</p> + tor-browser-<version-torbrowserbundle>_en-US.exe.asc. For a list + of which developer signs which package, see our <a href="<page + docs/signing-keys>">signing keys</a> page.</p>
<h3>Windows</h3> <hr> @@ -91,7 +93,7 @@ to download the ".asc" file as well. Assuming you downloaded the package and its signature to your Desktop, run:</p>
- <pre>C:\Program Files\Gnu\GnuPg\gpg.exe --verify C:\Users\Alice\Desktop<file-win32-bundle-stable>.asc C:\Users\Alice\Desktop<file-win32-bundle-stable></pre> + <pre>C:\Program Files\Gnu\GnuPg\gpg.exe --verify C:\Users\Alice\Desktop<file-win32-bundle-stable>.asc</pre>
<p>The output should say "Good signature": </p>
@@ -147,7 +149,7 @@ to download the ".asc" file as well. Assuming you downloaded the package and its signature to your Desktop, run:</p>
- <pre>gpg --verify /Users/Alice/<file-osx-x86-bundle-stable>.asc /Users/Alice/<file-osx-x86-bundle-stable></pre> + <pre>gpg --verify /Users/Alice/<file-osx-x86-bundle-stable>.asc</pre>
<p>The output should say "Good signature": </p>
tor-commits@lists.torproject.org