{"id":638,"date":"2014-07-01T07:02:52","date_gmt":"2014-07-01T05:02:52","guid":{"rendered":"http:\/\/blog.philippgoecke.de\/?p=638"},"modified":"2014-07-01T07:02:52","modified_gmt":"2014-07-01T05:02:52","slug":"verify-linux-kernel-download-with-gpg","status":"publish","type":"post","link":"https:\/\/stls.eu\/blog\/2014\/07\/01\/verify-linux-kernel-download-with-gpg\/","title":{"rendered":"verify Linux Kernel download with GPG"},"content":{"rendered":"<p>get the kernel and the gpg signature<\/p>\n<pre>wget https:\/\/www.kernel.org\/pub\/linux\/kernel\/v3.x\/linux-3.15.3.tar.xz\r\nwget https:\/\/www.kernel.org\/pub\/linux\/kernel\/v3.x\/linux-3.15.3.tar.sign<\/pre>\n<p>download the public key from the PGP keyserver in order to verify the signature<\/p>\n<pre>gpg --recv-keys 6092693E<\/pre>\n<p>verify you got the right key<\/p>\n<pre>gpg --fingerprint 6092693E<\/pre>\n<p><code>pub   4096R\/6092693E 2011-09-23<br \/>\n  Schl.-Fingerabdruck = 647F 2865 4894 E3BD 4571  99BE 38DB BDC8 6092 693E<br \/>\nuid                  Greg Kroah-Hartman (Linux kernel stable release signing key) <greg@kroah.com><br \/>\nsub   4096R\/76D54749 2011-09-23<\/code><\/p>\n<p>Now verify the archive against the signature<\/p>\n<pre>unxz -k -d linux-3.15.3.tar.xz\r\ngpg --verify linux-3.15.3.tar.sign<\/pre>\n<p><code>gpg: Unterschrift vom Di 01 Jul 2014 05:14:27 CEST mittels RSA-Schl\u00fcssel ID 6092693E<br \/>\ngpg: Korrekte Unterschrift von \"Greg Kroah-Hartman (Linux kernel stable release signing key) <greg@kroah.com>\"<br \/>\ngpg: WARNUNG: Dieser Schl\u00fcssel tr\u00e4gt keine vertrauensw\u00fcrdige Signatur!<br \/>\ngpg:          Es gibt keinen Hinweis, da\u00df die Signatur wirklich dem vorgeblichen Besitzer geh\u00f6rt.<br \/>\nHaupt-Fingerabdruck  = 647F 2865 4894 E3BD 4571  99BE 38DB BDC8 6092 693E<\/code><\/p>\n<p><a href=\"https:\/\/www.kernel.org\/signature.html\" title=\"signature\"><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>get the kernel and the gpg signature wget https:\/\/www.kernel.org\/pub\/linux\/kernel\/v3.x\/linux-3.15.3.tar.xz wget https:\/\/www.kernel.org\/pub\/linux\/kernel\/v3.x\/linux-3.15.3.tar.sign download the public key from the PGP keyserver in order to verify the signature gpg &#8211;recv-keys 6092693E verify you got the right key gpg &#8211;fingerprint 6092693E pub 4096R\/6092693E 2011-09-23 &hellip; <a href=\"https:\/\/stls.eu\/blog\/2014\/07\/01\/verify-linux-kernel-download-with-gpg\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[40,38,4],"tags":[],"class_list":["post-638","post","type-post","status-publish","format-standard","hentry","category-gpg","category-kernel","category-linux"],"_links":{"self":[{"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/posts\/638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/comments?post=638"}],"version-history":[{"count":6,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/posts\/638\/revisions"}],"predecessor-version":[{"id":984,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/posts\/638\/revisions\/984"}],"wp:attachment":[{"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/media?parent=638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/categories?post=638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/tags?post=638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}