-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SHA256: 37d2b2ab41baea4722bcd5f0c4ce67fac89a35099f0fd48957f3f2676e3eeb71 *webpics-1.0.0.sh 80608dfc5853d1adeaead7606ce766e1251c07407667bac75a2ac3a2043561ab *webpics_1.0.0-1_all.deb 0e2349202c6263d4fe6610f55c1564fbd9164628cd350bf0d86bd1ccac8a59ba *webpics-complete.tar.gz This file (webpics-1.0.0.SHA256.txt) is used to authenticate download of webpics version 1.0.0 Homepage: http://igurublog.wordpress.com/downloads/script-webpics/ Why Authenticate? Verifying the authenticity of downloaded files prior to installation is important to ensure that your download is not corrupt and that no one has tampered with the server holding the files. 1) If you don't already have IgnorantGuru's CURRENT key on your keyring: gpg --keyserver keys.gnupg.net --recv-keys 0x8835279A1936270694BE8B7C0EAEC485107165A1 (if you receive an error, try again) Then visually verify that the given fingerprint matches the one shown here: http://igurublog.wordpress.com/contact-ignorantguru/ 2) Download one or more files (the first is required): wget http://downloads.sf.net/project/ig-scripts/webpics-1.0.0.SHA256.txt wget http://downloads.sf.net/project/ig-scripts/webpics-1.0.0.sh wget http://downloads.sf.net/project/ig-scripts/webpics_1.0.0-1_all.deb wget http://downloads.sf.net/project/ig-scripts/webpics-complete.tar.gz 3) Check signature on the SHA256 file: gpg --verify webpics-1.0.0.SHA256.txt This should report a good signature like this: gpg: Signature made using DSA key ID 107165A1 gpg: Good signature from IgnorantGuru (igurublog.wordpress.com) gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. If a BAD signature is reported, please notify IgnorantGuru immediately so the file server can be checked. A "key is not certified" warning can be safely ignored (assuming you visually verified the key fingerprint in step 1). 4) Authenticate the downloaded files: sha256sum --check webpics-1.0.0.SHA256.txt This should report OK for all the files present. For example: webpics-1.0.0.sh: OK webpics_1.0.0-1_all.deb: OK webpics-complete.tar.gz: OK If you see FAILED next to a file, then the file is invalid or missing - do not use it. 5) Install webpics-1.0.0 and any required dependencies. See: http://igurublog.wordpress.com/library/script-installation-instructions/ http://igurublog.wordpress.com/downloads/script-webpics/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iF4EAREIAAYFAk3EA8oACgkQDq7EhRBxZaEzdwD9G75ebFVZnCBsRwhUWbkhOVSV WIueTvzk8C6Q3io6bWUBAL5ocnhiH4ird5nMEgQu4DHUop9A8Ik/Hczbt1bAbQi+ =Ls7S -----END PGP SIGNATURE-----