[Xfce4-commits] [panel-plugins/xfce4-hardware-monitor-plugin] 05/06: Add signature verification instructions

[noreply at xfce.org]

This is an automated email from the git hooks/post-receive script.

omegaphil pushed a commit to branch omegaphil/pkg
in repository panel-plugins/xfce4-hardware-monitor-plugin.

commit 018b04ea30ccbfc251b708a425e6648d5f424cc6
Author: OmegaPhil <OmegaPhil at startmail.com>
Date:   Sun Oct 26 13:27:43 2014 +0000

    Add signature verification instructions
---
 README.md |   23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/README.md b/README.md
index 1177866..b0c6d00 100644
--- a/README.md
+++ b/README.md
@@ -7,3 +7,26 @@ Please report any problems on the [issue tracker](https://github.com/OmegaPhil/h
 
 To download a file, click on the filename, then click View Raw. **DO NOT**
 right click on a link, as this will save the web page, not the file.
+
+From v1.4.6 these archives are signed by my GPG key - to verify:
+
+1. Install dpkg-sig: sudo aptitude install dpkg-sig gpg
+2. Fetch my public key: gpg --keyserver keys.gnupg.net --recv-keys 0xFDC2F38F
+3. Confirm that the fingerprint of the key matches (so that you can trust my key): E760 95EC DACD 5DEC 7653 A996 17D2 3C7D FDC2 F38F
+4. Verify the debian archive: dpkg-sig --verify *.deb
+
+If you haven't imported my key, you'll get this:
+
+===============================
+
+UNKNOWNSIG _gpgbuilder FDC2F38F
+
+===============================
+
+Otherwise:
+
+=======================================================================
+
+GOODSIG _gpgbuilder E76095ECDACD5DEC7653A99617D23C7DFDC2F38F 1407865602
+
+=======================================================================

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.