GitHub/libevent
1
0
Fork 0
mirror of https://github.com/libevent/libevent.git synced 2025-01-09 00:56:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add instruction for release tarballs validation with GPG keys

Browse Source 
Fixes: https://github.com/libevent/libevent/issues/1691
This commit is contained in:
Azat Khuzhin 2024-07-10 06:14:50 +02:00
parent 9d735b4bea
commit 7f23b5b5aa
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
Documentation/Developers.md Normal file
View File

@ -0,0 +1,29 @@
### How to verify the release archive?
You can download the release archive from the
[libevent.org](https://libevent.org) or from [github
releases](https://github.com/libevent/libevent/releases), but note, for later
you need `*.tar.gz*` files (sicne `Source code` is the archive that is
generated by github and they do not includes pre-configured scripts for
`autoconf`)
```
$ wget https://raw.githubusercontent.com/azat/azat.github.com/master/azatpub.asc
$ gpg --import azatpub.asc
# Or
$ gpg --recv-key 9E3AC83A27974B84D1B3401DB86086848EF8686D
$ wget https://github.com/libevent/libevent/releases/download/release-2.2.1-alpha/libevent-2.2.1-alpha-dev.tar.gz
$ wget https://github.com/libevent/libevent/releases/download/release-2.2.1-alpha/libevent-2.2.1-alpha-dev.tar.gz.asc
$ gpg --verify libevent-2.2.1-alpha-dev.tar.gz.asc
```
*You can find my public key [on github](https://raw.githubusercontent.com/azat/azat.github.com/master/azatpub.asc)*
You may also want to check the key signatures:
```
$ gpg --list-signatures 9E3AC83A27974B84D1B3401DB86086848EF8686D
# Download missing keys and then
$ gpg --check-signatures 9E3AC83A27974B84D1B3401DB86086848EF8686D
```