[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: checksum files are not signed what gives?



On Wed, 6 Jul 2016 14:33:26 -0400
Steve K <strangerland@gmail.com> wrote:

> SHA512SUMS
> <http://cdimage.debian.org/debian-cd/8.5.0/amd64/bt-dvd/SHA512SUMS>
> for instance is not signed so whats the point of SHA512SUMS.sign
> <http://cdimage.debian.org/debian-cd/8.5.0/amd64/bt-dvd/SHA512SUMS.sign>

The .sign file is the signature of the checksum file - it's called a
detached signature and GnuPG is able to verify the signature correctly.

-- 


Neil Williams
=============
http://www.linux.codehelp.co.uk/

Attachment: pgpsydXbnxcCc.pgp
Description: OpenPGP digital signature


Reply to: