This is the mail archive of the
gcc@gcc.gnu.org
mailing list for the GCC project.
Re: Signature verification problem...
Zack Weinberg:
> Gerald Pfeifer <gerald@pfeifer.com> writes:
>
>> On Mon, 5 Jul 2004, Bernard Leak wrote:
>>> the files available from your FTP site and its mirrors have signatures,
>>> but how can I verify them?
>>
>> I have never done this before, either, but this is a very valid
>> question,
>> so I did some "research". Here is how you can proceed, after you have
>> downloaded both the source archives and the corresponding signatures.
> [...]
>
> Perhaps we could put this information on the website somewhere?
> Ideally with Mark's key fingerprint included.
That looks to me to be a good suggestion -- the keys would
be those of people "authorized" to upload GCC on ftp.gnu.org
and I believe all of them have signed GGC tarballs as of today.
-- Gaby