LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-29-2004, 10:12 PM   #1
dubya
Member
 
Registered: Mar 2004
Location: Kitchener, Ontario, Canada
Posts: 386

Rep: Reputation: 30
Using .md5.asc files


Hey,
I've just downloaded all of the iso images for Mandrake Linux 10, but before I burn them, I want to check using the MD5SUM. I've used it once before, but before there were separate md5 files for each iso image. This time, all I see on the ftp is one file with the extension .md5.asc. How do I use this file to check the images? Thanks in advance.
 
Old 05-30-2004, 04:17 AM   #2
pingswept
Member
 
Registered: May 2003
Location: Cambridge, MA
Distribution: SuSE, RedHat, and OpenBSD
Posts: 116

Rep: Reputation: 15
Here is something to get you started from:
http://www.knoppix.net/docs/index.php/FaqDownloading

----------------------------------------------------------------------------------------------

Q: What are the ASC files that accompany the CD ISO images and MD5 files?

A: The files with the .asc extension are PGP-signed messages that contain the md5sum used for verifying the ISO CD images. With this you can be sure the ISO image and accompanying MD5 file are genuine, because the .asc file containing the MD5 is signed with Klaus Knopper's PGP key. This could only be compromised if someone got hold of the secret key used to sign the message. To verify the file, you need to import PGP key ID 0xBA8F038D from your favorite keyserver, then in Linux you can type "gpg --verify KNOPPIX_Vxxxxxxxxxxxxxxxxx.iso.md5.asc"
 
Old 05-30-2004, 11:20 PM   #3
dubya
Member
 
Registered: Mar 2004
Location: Kitchener, Ontario, Canada
Posts: 386

Original Poster
Rep: Reputation: 30
Thanks a lot for your response.

I don't understand the part about importing a PGP key, because I don't know what it is; is it a file? If so, where do I put it? In the same directory as the ISO and ASC files?

Thanks again.
 
Old 07-11-2004, 12:42 AM   #4
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 376Reputation: 376Reputation: 376Reputation: 376
to use an .asc file to verify a package's integrity, you need to have gnupg installed...

also, remember that gnupg and md5sum don't perform the same function...

here's some links:

http://httpd.apache.org/dev/verification.html

http://www.kernel.org/signature.html

http://www.gnupg.org/documentation/faqs.html


and if you wanna have a gnupg party:

http://www.cryptnet.net/fdp/crypto/gpg-party.html


=)
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
using iso.md5 and iso.md5.asc Tyir Linux - Newbie 3 07-11-2004 12:45 AM
iso.asc (something like that) and iso.md5 tnf Linux - Newbie 2 07-11-2004 12:44 AM
md5 and asc files Yohhan Linux - Newbie 6 07-11-2004 12:43 AM
What do I do with md5 files? Chrissi General 4 02-08-2004 06:16 PM
What are the checksum.md5 files for? enigma Z Linux - Newbie 1 09-23-2003 09:38 PM


All times are GMT -5. The time now is 07:04 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration