Annotation of pgp/contrib/md5sum/readme, revision 1.1.1.2

1.1       root        1: This utility computes MD5 checksums of files, ignoring end-of-line
1.1.1.2 ! root        2: conventions unless the -b (binary) flag is set.  The file "pgp23.md5"
1.1       root        3: contains the signatures of all the files in the source.  If you are
1.1.1.2 ! root        4: in the source directory and run "md5sum -c pgp23.md5", you will get
1.1       root        5: an error message if any files fail to match.  If all files match,
                      6: nothing will be printed.
                      7: 
                      8: You need to borrow some files from the PGP sources to compile this
                      9: utility (md5.c, md5.h, and possibly the getopt implementation);
                     10: see the md5sum.c file for details.
                     11: 
1.1.1.2 ! root       12: The file pgp23.md5 is signed by one of the developers, so you can be
1.1       root       13: reasonably sure it's correct.  It would be possible for a hard-working
                     14: miscreant to fiddle with the distribution so all of this mutual checking
                     15: would not show any errors, but it's not going to happen accidentally.
                     16: And if you have a previous version of PGP that you trust, it's not going
                     17: to happen at all.
                     18: 
                     19: The only other thing that's needed is a detached PGP signature of the
1.1.1.2 ! root       20: files md5sum.c, md5.c and md5.h, and anyone with a previous trusted
        !            21: version of PGP can be sure that no tampering has occurred anywhere, and
        !            22: that's here:
1.1       root       23: 
1.1.1.2 ! root       24: md5sum.c:
1.1       root       25: -----BEGIN PGP MESSAGE-----
1.1.1.2 ! root       26: Version: 2.3
1.1       root       27: 
1.1.1.2 ! root       28: iQBgAgUBLB2GKco9of2GWqfzAQEHNwJXcWywhAoq8hBOxRnk6IDU7FoltmeInXDS
        !            29: kkO7qpM8yL34MChuXRn9P97FItJeWUatRPDIGSzO6Gqw+CA5jiRfI6Sj9zMBU1ef
        !            30: VHR2
        !            31: =5EcU
        !            32: -----END PGP MESSAGE-----
        !            33: md5.c:
        !            34: -----BEGIN PGP MESSAGE-----
        !            35: Version: 2.3
        !            36: 
        !            37: iQBgAgUBLB2Ghso9of2GWqfzAQH0rQJVFoCqfOtnLe1hIKb21wIiX4VqPJbHg2B+
        !            38: p5AXczVVMoO7NyYaCuFEQfGeET+GMq3yqp4jH6/mQ8fglXHkPDwpR7D8/f2Opl2g
        !            39: MLRg
        !            40: =TVF4
        !            41: -----END PGP MESSAGE-----
        !            42: md5.h:
        !            43: -----BEGIN PGP MESSAGE-----
        !            44: Version: 2.3
        !            45: 
        !            46: iQBgAgUBLB2Gnco9of2GWqfzAQGORQJXSH/dr7rvLw2mtwZx/+8gzPjVVmTLapek
        !            47: 2hWo4LOu1/oBFYZN/C/ZQogr7XTk6vJiL4GqrDNWzzi+q1au3dUMO4FP/eFD/fke
        !            48: AB30
        !            49: =+Hn6
1.1       root       50: -----END PGP MESSAGE-----
                     51: 
                     52: (And my and Branko's keys are in the supplied key ring, signed by
                     53: Philip Zimmermann, so you know that we are who we say we are, and if
                     54: there are any trojan horses in the source, you know who put them there.
                     55: Isn't security fun?)
                     56: -- 
                     57:        -Colin <[email protected]>

unix.superglobalmegacorp.com

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.