From 61b40520ba9024ee4e8592345eec062795c6346f Mon Sep 17 00:00:00 2001 From: techknowlogick Date: Thu, 5 Jul 2018 21:36:55 -0400 Subject: [PATCH] GPG verification docs (#4381) * GPG verification docs * update URL --- docs/content/doc/installation/from-binary.en-us.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/docs/content/doc/installation/from-binary.en-us.md b/docs/content/doc/installation/from-binary.en-us.md index 9c8859215..f393333e4 100644 --- a/docs/content/doc/installation/from-binary.en-us.md +++ b/docs/content/doc/installation/from-binary.en-us.md @@ -21,10 +21,18 @@ the destination platform from the [downloads page](https://dl.gitea.io/gitea), c the URL and replace the URL within the commands below: ```sh -wget -O gitea https://dl.gitea.io/gitea/1.4.2/gitea-1.4.2-linux-amd64 +wget -O gitea https://dl.gitea.io/gitea/1.4.3/gitea-1.4.3-linux-amd64 chmod +x gitea ``` +## Verify GPG signature +Gitea signs all binaries with a [GPG key](https://pgp.mit.edu/pks/lookup?op=vindex&fingerprint=on&search=0x2D9AE806EC1592E2) to prevent against unwanted modification of binaries. To validate the binary download the signature file which ends in `.asc` for the binary you downloaded and use the gpg command line tool. + +```sh +gpg --keyserver pgp.mit.edu --recv 0x2D9AE806EC1592E2 +gpg --verify gitea-1.5.0-linux-amd64.asc gitea-1.5.0-linux-amd64 +``` + ## Test After getting a binary, it can be tested with `./gitea web` or moved to a permanent