-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Roy Carin wrote:
> I just downloaded clamav 0.90rc3 from Sourceforge here: > http://sourceforge.net/project/showfiles.php?group_id=86638&package_id=90197&release_id=483125 > > At first I though the .sig file was an md5-sum or sha1-sum, but it's > binary data. How do I use it to check the integrity of the tar file? Use `gpg --verify clamav-0.90rc3.tar.gz.sig` (with the .tar.gz in the same directory). You may have to import the keys if you don't have a default key server, in such cases I use: gpg --keyserver random.sks.keyserver.penguin.de --verify ... - -- René Berber -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Cygwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFw7cYL3NNweKTRgwRAnX0AJ9wmgnU6YiS8Sv1XnCbEiuzp3o5lwCfRtBr Ka05MAjTiwWPXNYSEtw5wFY= =nTrx -----END PGP SIGNATURE----- _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html