Tag Info

New answers tagged

0

Looking at the gpg commands man page and how it behaves when there is no $HOME/.gnugpg directory present I'm not sure how this would work. When you have no $HOME/.gnugpg directory present, gpg will create one for you. $ gpg --list-keys --fingerprint gpg: directory `/root/.gnupg' created gpg: new configuration file `/root/.gnupg/gpg.conf' created gpg: ...


0

The first shown UID is the one which either has the primary flag or the newest self-signature. The others are shown in the order in which they are added to the keyring i.e. either the order of creation or the order of import. Thus you can minimize the number of self-signatures by creating files which contain just one UID, delete the key (don't forget to ...


1

The only guaranteed behavior is that the primary UID is listed first. Further rearranging them is not possible, and creates lots of clutter in the keyring, as each change requires new self-signatures. Even if the UIDs show up in the "correct" order on your system, they do so because the order of database changes and the implementation of the database led ...


2

You can make a UID appear at the top of the list by making it primary. The top UID then gets moved down to the second slot, and likewise, everything else shifts one space downward. It seems as though this "shift" only happens once you save the changes to the key. If you want to get the correct order, you need to repeat these steps starting with the UID you ...


1

Make a wrapper script around /usr/bin/gpgv. Supply the pathname to the wrapper script as the value of Dir::Bin::gpg (using apt-get --option). Have the wrapper script examine the output and exit status of gpgv, and communicate failure back to the toplevel script somehow (I suggest using kill to send a signal).


2

How do you download Debian securely and make sure 110% that it is an unaltered copy you're getting? Download Debian installation media. Download the accompanying SHA256SUMS and SHA256SUMS.sign files. Import the keys from the Debian keyring or a PGP key server and check their fingerprints on the Debian website accessed over HTTPS. $ gpg --recv-key ...


3

the pages at https://tails.boum.org/download/index.en.html#index3h1 explain the process of verifying that the image you download has the expected checksum, the process of verifying that the checksum you read on the website is signed by the distributor, the process of have reasonable evidence that the key you downloaded is indeed not a malicious one. To be ...


2

Debian provides MD5 checksums to all image files which you can then compare with your downloaded file to make sure it is the same file.



Top 50 recent answers are included