xml-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Shane_Curc...@lotus.com
Subject Re: Verification of Download
Date Tue, 03 Apr 2001 03:54:46 GMT

Yup, the .sig files are PGP signatures of the actual .zip or .tar.gz
download itself.  You don't physically need them to use Xalan, you only
need them if you really care about authenticity.

To check the authenticity of a xalan distribution, you'll need a copy of
PGP which is available in a number of licenses, including some free
non-commercial licenses, either from an mit.edu site or just somewhere on
the pgp.com site.  Once you've got some basic version of PGP installed, you
should be able to just 'verify the signature' of the blah.zip.sig file,
which basically verifies that the corresponding .zip file has not been
changed since we signed it with either my public key or the LotusXSL_Team
key.  I know I've uploaded my public key to at least the MIT keyserver, and
I think I uploaded the LotusXSL_Team one too, so if you grab the public key
halves you can also double-check that it was one of those keys that
actually signed the distribution.

In case anyone's curious, here's a copy of my apache-related public key for
shane_curcuru@lotus.com:
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP Personal Privacy 6.5.3
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=+2Ei
-----END PGP PUBLIC KEY BLOCK-----

- Shane


---------------------------------------------------------------------
In case of troubles, e-mail:     webmaster@xml.apache.org
To unsubscribe, e-mail:          general-unsubscribe@xml.apache.org
For additional commands, e-mail: general-help@xml.apache.org


Mime
View raw message