diff --git a/_pages/software.md b/_pages/software.md index 244d578..43fe898 100644 --- a/_pages/software.md +++ b/_pages/software.md @@ -10,6 +10,7 @@ permalink: /software/ - [Table of contents](#table-of-contents) - [Introduction](#introduction) + - [Extract](#extract) - [Terminology](#terminology) - [Methods](#methods) - [Upload](#upload) @@ -23,7 +24,8 @@ permalink: /software/ - [Download the repository](#download-the-repository) - [Check the signature](#check-the-signature) - [Run the checksums](#run-the-checksums) - - [Extract](#extract) + - [Extract](#extract-1) +- [Keys](#keys) - [Software](#software) - [fpyutils](#fpyutils) - [Repository](#repository) @@ -38,9 +40,11 @@ permalink: /software/ This page is the only *real* trusted source of some of my software. -Here you will find methods to assert the authenticity of the presented software packages. You may contact me directly -to obtain a copy of the public key(s) used for the signatures, instead of downloading them -from here. +Here you will find methods to assert the authenticity of the presented software packages. + +You may contact me directly to obtain the public key fingerprint in a different way. + +### Extract The following extract is from a [post by Mike Gerwitz](https://mikegerwitz.com/2012/05/a-git-horror-story-repository-integrity-with-signed-commits#trust): @@ -127,6 +131,12 @@ If the public key is unknown you must import it from a trusted source: tar -xvzf ${project}-${tag}.tar.gz +## Keys + +| Key | Fingerprint | +|-----|-------------| +| [pgp_pubkey_2020.txt]({{ site.baseurl }}/pubkeys/pgp_pubkey_2020.txt) | [pgp_pubkey_fingerprint_2020.txt]({{ site.baseurl }}/pubkeys/pgp_pubkey_fingerprint_2020.txt) | + ## Software ### fpyutils diff --git a/pubkeys/pgp_pubkey_fingerprint_2019.txt b/pubkeys/pgp_pubkey_fingerprint_2019.txt new file mode 100644 index 0000000..96ac98b --- /dev/null +++ b/pubkeys/pgp_pubkey_fingerprint_2019.txt @@ -0,0 +1 @@ +B2F3 23BA 539E 495F D262 81E0 60FE 51DF 4AFF 2E13 diff --git a/pubkeys/pgp_pubkey_fingerprint_2020.txt b/pubkeys/pgp_pubkey_fingerprint_2020.txt new file mode 100644 index 0000000..96ac98b --- /dev/null +++ b/pubkeys/pgp_pubkey_fingerprint_2020.txt @@ -0,0 +1 @@ +B2F3 23BA 539E 495F D262 81E0 60FE 51DF 4AFF 2E13