Howto: Verify integrity of the tar balls or source code
Verifying integrity of the tar balls or source code is an essential step, which makes sure that you are going to use guanine software (also know as checksum). Every Linux or UNIX admin should be aware of this test. However, what is a checksum? A checksum is a form of a very simple measure for protecting the integrity of data from both hackers (read as crackers) and data transmission error over network i.e. make sure no one has tampered with a source file (see checksum @ wikipedia) For file verification, use any one of the following command:
- sha1sum - check SHA1 (160-bit) checksums
- md5sum - check MD5 (128-bit) checksums
- gpg - Use to validate a GPG certificate
Therefore, whenever you visit source-code download site, you will come across md5sum, sha1sum, or gpg signature keys listed. Following is general syntax to verify keys with different commands:
- sha1sum {source-code-file-name}
- md5sum {source-code-file-name}
- gpg --verify {source-code-file-name.sig} {source-code-file-name}
Examples ~ sure, without examples no one able to grasp the idea:
- Howto: Verify integrity of the tar balls with sha1sum command
- Howto: Verify integrity of the tar balls with md5sum command
- Howto: Verify integrity of the tar balls with gpg command
E-mail this to a friend
Printable version
You may also be interested in other helpful articles:
- Howto: Verify integrity of the tar balls with sha1sum command
- How To Verify Integrity of The Tar Balls With md5sum Command
- Howto: Verify integrity of the tar balls with gpg command
- Howto: Verify Downloaded Linux / BSD DVD or CD ISO images for integrity
- Linux missing GPG db42a60e key error message
Discussion on This Article:
Leave a Reply
We encourage your comments, and suggestions. But please stay on topic, be polite, and avoid spam. Thank you very much for stopping by our site!
Tags: checksum, gpg_signature, hackers, integrity, md5, md5sum, signature_keys, source code, tar_balls
Interesting stuff, Keep it up good work