view release on metacpan or  search on metacpan

docs/forrest-docs/src/documentation/content/xdocs/download.xml  view on Meta::CPAN

	<li>If you receive any other response than: <em>Good
	    signature</em>, something went wrong, so don't trust the
	    file.
	</li>
      </ol>
    </section>
    <section>
<title>Using GnuPG to verify the code</title>
      <ol>
	<li>Import the key to your keyring: <code>
gpg --import key_file
</code></li>
	<li>Verify the source code file <code>
gpg&nbsp;--verify&nbsp;XML-Xerces-X.Y.Z&nbsp;XML-Xerces-X.Y.Z.asc
</code></li>
	<li>If you receive any other response than: <em>gpg: Good
	signature</em>, something went wrong, so don't trust the
	file. 
	</li>
      </ol>
    </section>
  </section>
</section>
</body>
</document>

docs/forrest-docs/src/documentation/content/xdocs/mirrors.html  view on Meta::CPAN

% pgpk -a KEYS
% pgpv apache-forrest-X.Y.tar.gz.asc

<em>or</em>

% pgp -ka KEYS
% pgp apache-forrest-X.Y.tar.gz.asc

<em>or</em>

% gpg --import KEYS
% gpg --verify apache-forrest-X.Y.tar.gz.asc
</pre>

<p>To verify the MD5 signature on the files, you need to use a program
called <code>md5</code> or <code>md5sum</code>, which is
included in many unix distributions.  It is also available as part of
<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
Textutils</a>.  Windows users can get binary md5 programs from <a
href="http://www.fourmilab.ch/md5/">here</a>, <a
href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
<a href="http://www.slavasoft.com/fsum/">here</a>.</p>