diff --git a/web/download/index.org b/web/download/index.org index 5211692..a48043a 100644 --- a/web/download/index.org +++ b/web/download/index.org @@ -1,141 +1,149 @@ #+TITLE: GnuPG - Download #+STARTUP: showall align #+SETUPFILE: "../share/setup.inc" #+GPGWEB-NEED-SWDB #+OPTIONS: ^:{} #+macro: check_sig_note GnuPG distributions are signed. It is wise and more secure to check out for their [[integrity_check.org][@@html:@@integrity@@html:@@]]. #+macro: ftpopen @@html:download@@ #+macro: ftpcloseS @@html:">sig@@ * Download #+index: GnuPG!download Note that you may also download the GNU Privacy Guard from a mirror site close to you. See our [[file:mirrors.org][list of mirrors]]. The table below provides links to the location of the files on the primary server only. ** Source code releases These are the canonical release forms of GnuPG. To use them you need to build the binary version from the provided source code. For Unix systems this is the standard way of installing software. For GNU/Linux distributions are commonly used (e.g. Debian, Fedora, RedHat, or Ubuntu) which may already come with a directly installable packages. However, these version may be older so that building from the source is often also a good choice. Some knowledge on how to compile and install software is required. The table lists the different GnuPG packages, followed by required libraries, required tools, optional software, and legacy versions of GnuPG. For end-of-life dates see further down. - | Name | Version | Date | Size | Tarball | Signature | - |-----------------+------------------------+-------------------------+-------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| - | | | | | | | - | [[../software/index.org][GnuPG]] | {{{gnupg24_ver}}} | {{{gnupg24_date}}} | {{{gnupg24_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg24_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg24_ver}}}.tar.bz2.sig{{{ftpclose}}} | - | [[../software/index.org][GnuPG]] (LTS) | {{{gnupg22_ver}}} | {{{gnupg22_date}}} | {{{gnupg22_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg22_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg22_ver}}}.tar.bz2.sig{{{ftpclose}}} | - |-----------------+------------------------+-------------------------+-------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| - | [[../software/libgpg-error/index.org][Libgpg-error]] | {{{libgpg_error_ver}}} | {{{libgpg_error_date}}} | {{{libgpg_error_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgpg-error/libgpg-error-{{{libgpg_error_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgpg-error/libgpg-error-{{{libgpg_error_ver}}}.tar.bz2.sig{{{ftpclose}}} | - | [[../software/libgcrypt/index.org][Libgcrypt]] | {{{libgcrypt_ver}}} | {{{libgcrypt_date}}} | {{{libgcrypt_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgcrypt/libgcrypt-{{{libgcrypt_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgcrypt/libgcrypt-{{{libgcrypt_ver}}}.tar.bz2.sig{{{ftpclose}}} | - | [[../software/libgcrypt/index.org][Libgcrypt]] (LTS) | {{{libgcrypt18_ver}}} | {{{libgcrypt18_date}}} | {{{libgcrypt18_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgcrypt/libgcrypt-{{{libgcrypt18_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgcrypt/libgcrypt-{{{libgcrypt18_ver}}}.tar.bz2.sig{{{ftpclose}}} | - | [[../software/libksba/index.org][Libksba]] | {{{libksba_ver}}} | {{{libksba_date}}} | {{{libksba_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libksba/libksba-{{{libksba_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libksba/libksba-{{{libksba_ver}}}.tar.bz2.sig{{{ftpclose}}} | - | [[../software/libassuan/index.org][Libassuan]] | {{{libassuan_ver}}} | {{{libassuan_date}}} | {{{libassuan_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libassuan/libassuan-{{{libassuan_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libassuan/libassuan-{{{libassuan_ver}}}.tar.bz2.sig{{{ftpclose}}} | - | [[../software/ntbtls/index.org][ntbTLS]] | {{{ntbtls_ver}}} | {{{ntbtls_date}}} | {{{ntbtls_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/ntbtls/ntbtls-{{{ntbtls_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/ntbtls/ntbtls-{{{ntbtls_ver}}}.tar.bz2.sig{{{ftpclose}}} | - | [[../software/npth/index.org][nPth]] | {{{npth_ver}}} | {{{npth_date}}} | {{{npth_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/npth/npth-{{{npth_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/npth/npth-{{{npth_ver}}}.tar.bz2.sig{{{ftpclose}}} | - |-----------------+------------------------+-------------------------+-------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| - | Pinentry | {{{pinentry_ver}}} | {{{pinentry_date}}} | {{{pinentry_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/pinentry/pinentry-{{{pinentry_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/pinentry/pinentry-{{{pinentry_ver}}}.tar.bz2.sig{{{ftpclose}}} | - |-----------------+------------------------+-------------------------+-------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| - | [[../software/gpgme/index.org][GPGME]] | {{{gpgme_ver}}} | {{{gpgme_date}}} | {{{gpgme_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gpgme/gpgme-{{{gpgme_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gpgme/gpgme-{{{gpgme_ver}}}.tar.bz2.sig{{{ftpclose}}} | - | [[../software/scute/index.org][Scute]] | {{{scute_ver}}} | {{{scute_date}}} | {{{scute_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/scute/scute-{{{scute_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/scute/scute-{{{scute_ver}}}.tar.bz2.sig{{{ftpclose}}} | - | [[../software/gpa/index.org][GPA]] | {{{gpa_ver}}} | {{{gpa_date}}} | {{{gpa_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gpa/gpa-{{{gpa_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gpa/gpa-{{{gpa_ver}}}.tar.bz2.sig{{{ftpclose}}} | - |-----------------+------------------------+-------------------------+-------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| - | GnuPG 1.4 | {{{gnupg1_ver}}} | {{{gnupg1_date}}} | {{{gnupg1_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg1_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg1_ver}}}.tar.bz2.sig{{{ftpclose}}} | - |-----------------+------------------------+-------------------------+-------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| + | Name | Version | Date | Size | Tarball | Signature | + |-----------------+------------------------+-------------------------+--------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| + | | | | | | | + | [[../software/index.org][GnuPG]] | {{{gnupg24_ver}}} | {{{gnupg24_date}}} | {{{gnupg24_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg24_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg24_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | [[../software/index.org][GnuPG]] (LTS) | {{{gnupg22_ver}}} | {{{gnupg22_date}}} | {{{gnupg22_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg22_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg22_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | GnuPG Desktop | {{{gnupgdesk_ver}}} | {{{gnupgdesk_date}}} | {{{gnupgdesk_src_size}}} | {{{ftpopen}}}{{{gpgcom_base}}}/gnupg/gnupg-desktop-{{{gnupgdesk_ver}}}.tar.xz | {{{ftpopen}}}{{{gpgcom_base}}}/gnupg/gnupg-desktop-{{{gnupgdesk_ver}}}.tar.xz.sig{{{ftpclose}}} | + |-----------------+------------------------+-------------------------+--------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| + | [[../software/libgpg-error/index.org][Libgpg-error]] | {{{libgpg_error_ver}}} | {{{libgpg_error_date}}} | {{{libgpg_error_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgpg-error/libgpg-error-{{{libgpg_error_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgpg-error/libgpg-error-{{{libgpg_error_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | [[../software/libgcrypt/index.org][Libgcrypt]] | {{{libgcrypt_ver}}} | {{{libgcrypt_date}}} | {{{libgcrypt_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgcrypt/libgcrypt-{{{libgcrypt_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgcrypt/libgcrypt-{{{libgcrypt_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | [[../software/libgcrypt/index.org][Libgcrypt]] (LTS) | {{{libgcrypt18_ver}}} | {{{libgcrypt18_date}}} | {{{libgcrypt18_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgcrypt/libgcrypt-{{{libgcrypt18_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libgcrypt/libgcrypt-{{{libgcrypt18_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | [[../software/libksba/index.org][Libksba]] | {{{libksba_ver}}} | {{{libksba_date}}} | {{{libksba_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libksba/libksba-{{{libksba_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libksba/libksba-{{{libksba_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | [[../software/libassuan/index.org][Libassuan]] | {{{libassuan_ver}}} | {{{libassuan_date}}} | {{{libassuan_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libassuan/libassuan-{{{libassuan_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/libassuan/libassuan-{{{libassuan_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | [[../software/ntbtls/index.org][ntbTLS]] | {{{ntbtls_ver}}} | {{{ntbtls_date}}} | {{{ntbtls_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/ntbtls/ntbtls-{{{ntbtls_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/ntbtls/ntbtls-{{{ntbtls_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | [[../software/npth/index.org][nPth]] | {{{npth_ver}}} | {{{npth_date}}} | {{{npth_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/npth/npth-{{{npth_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/npth/npth-{{{npth_ver}}}.tar.bz2.sig{{{ftpclose}}} | + |-----------------+------------------------+-------------------------+--------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| + | Pinentry | {{{pinentry_ver}}} | {{{pinentry_date}}} | {{{pinentry_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/pinentry/pinentry-{{{pinentry_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/pinentry/pinentry-{{{pinentry_ver}}}.tar.bz2.sig{{{ftpclose}}} | + |-----------------+------------------------+-------------------------+--------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| + | [[../software/gpgme/index.org][GPGME]] | {{{gpgme_ver}}} | {{{gpgme_date}}} | {{{gpgme_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gpgme/gpgme-{{{gpgme_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gpgme/gpgme-{{{gpgme_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | [[../software/scute/index.org][Scute]] | {{{scute_ver}}} | {{{scute_date}}} | {{{scute_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/scute/scute-{{{scute_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/scute/scute-{{{scute_ver}}}.tar.bz2.sig{{{ftpclose}}} | + | [[../software/gpa/index.org][GPA]] | {{{gpa_ver}}} | {{{gpa_date}}} | {{{gpa_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gpa/gpa-{{{gpa_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gpa/gpa-{{{gpa_ver}}}.tar.bz2.sig{{{ftpclose}}} | + |-----------------+------------------------+-------------------------+--------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| + | GnuPG 1.4 | {{{gnupg1_ver}}} | {{{gnupg1_date}}} | {{{gnupg1_size}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg1_ver}}}.tar.bz2{{{ftpclose}}} | {{{ftpopen}}}{{{ftp_loc_base}}}/gnupg/gnupg-{{{gnupg1_ver}}}.tar.bz2.sig{{{ftpclose}}} | + |-----------------+------------------------+-------------------------+--------------------------+--------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------------------------------------| {{{check_sig_note}}} Remarks: - /Pinentry/ is a collection of passphrase entry dialogs which is required for almost all usages of GnuPG. + - /GnuPG Desktop^{\reg}/ is an AppImage for Linux featuring the + current GnuPG version and Kleopatra, its advanced graphical user + interface. This is only the source code; for the actual AppImage + see below. This AppImage can be used on almost all 64bit x86 + Linux versions. + - /GPGME/ is the standard library to access GnuPG functions from programming languages. - /Scute/ is a PKCS#11 provider on top of GnuPG. - /GPA/ is a graphical frontend to GnuPG. - /GnuPG 1.4/ is the old, single binary version which still support the unsafe PGP-2 keys. This branch has no dependencies on the above listed libraries or the Pinentry. However, it lacks many modern features and will receive only important updates. ** GnuPG binary releases :PROPERTIES: :CUSTOM_ID: binary :END: #+index: Binaries!download In general we do not distribute binary releases but leave that to the common Linux distributions. However, for some operating systems we list pointers to readily installable releases. We cannot guarantee that the versions offered there are current. Note also that some of them apply security patches on top of the standard versions but keep the original version number. - | OS | Where | Description | - |---------+--------------------+------------------------------------------| - | | <18> | | - | Windows | [[https://gpg4win.org/download.html][Gpg4win]] | Full featured Windows version of /GnuPG/ | - | | {{{ftpopen}}}{{{ftp_loc_base}}}/binary/gnupg-w32-{{{gnupg24_w32_ver}}}.exe{{{ftpclose}}} {{{ftpopen}}}{{{ftp_loc_base}}}/binary/gnupg-w32-{{{gnupg24_w32_ver}}}.exe.sig{{{ftpcloseS}}} | Simple installer for the current /GnuPG/ | - | | {{{ftpopen}}}{{{ftp_loc_base}}}/binary/gnupg-w32cli-{{{gnupg1_w32cli_ver}}}.exe{{{ftpclose}}} {{{ftpopen}}}{{{ftp_loc_base}}}/binary/gnupg-w32cli-{{{gnupg1_w32cli_ver}}}.exe.sig{{{ftpcloseS}}} | Simple installer for /GnuPG 1.4/ | - | OS X | [[https://gpgtools.org][Mac GPG]] | Installer from the gpgtools project | - | | [[https://sourceforge.net/p/gpgosx/docu/Download/][GnuPG for OS X]] | Installer for /GnuPG/ | - | Debian | [[https://www.debian.org][Debian site]] | GnuPG is part of Debian | - | RPM | [[http://rpmfind.net/][rpmfind]] | RPM packages for different OS | - | Android | [[https://guardianproject.info/code/gnupg/][Guardian project]] | Provides a GnuPG framework | - | VMS | [[http://www.antinode.info/dec/sw/gnupg.html][antinode.info]] | A port of GnuPG 1.4 to OpenVMS | - | RISC OS | [[http://www.sbellon.de/gnupg.html][home page]] | A port of GnuPG to RISC OS | - |---------+--------------------+------------------------------------------| + | OS | Where | Description | + |---------+--------------------+----------------------------------------------------------| + | | <18> | | + | Linux | {{{ftpopen}}}{{{gpgcom_base}}}/gnupg/gnupg-desktop-{{{gnupgdesk_ver}}}-x86_64.AppImage{{{ftpclose}}} {{{ftpopen}}}{{{gpgcom_base}}}/gnupg/gnupg-desktop-{{{gnupgdesk_ver}}}-x86_64.AppImage.sig{{{ftpclose}}} | /GnuPG Desktop^{\reg}/ AppImage with the current /GnuPG/ | + | Windows | [[https://gpg4win.org/download.html][Gpg4win]] | Full featured Windows version of /GnuPG/ | + | | {{{ftpopen}}}{{{ftp_loc_base}}}/binary/gnupg-w32-{{{gnupg24_w32_ver}}}.exe{{{ftpclose}}} {{{ftpopen}}}{{{ftp_loc_base}}}/binary/gnupg-w32-{{{gnupg24_w32_ver}}}.exe.sig{{{ftpcloseS}}} | Simple installer for the current /GnuPG/ | + | | {{{ftpopen}}}{{{ftp_loc_base}}}/binary/gnupg-w32cli-{{{gnupg1_w32cli_ver}}}.exe{{{ftpclose}}} {{{ftpopen}}}{{{ftp_loc_base}}}/binary/gnupg-w32cli-{{{gnupg1_w32cli_ver}}}.exe.sig{{{ftpcloseS}}} | Simple installer for /GnuPG 1.4/ | + | OS X | [[https://gpgtools.org][Mac GPG]] | Installer from the gpgtools project | + | | [[https://sourceforge.net/p/gpgosx/docu/Download/][GnuPG for OS X]] | Installer for /GnuPG/ | + | Debian | [[https://www.debian.org][Debian site]] | GnuPG is part of Debian | + | RPM | [[http://rpmfind.net/][rpmfind]] | RPM packages for different OS | + | Android | [[https://guardianproject.info/code/gnupg/][Guardian project]] | Provides a GnuPG framework | + | VMS | [[http://www.antinode.info/dec/sw/gnupg.html][antinode.info]] | A port of GnuPG 1.4 to OpenVMS | + | RISC OS | [[http://www.sbellon.de/gnupg.html][home page]] | A port of GnuPG to RISC OS | + |---------+--------------------+----------------------------------------------------------| ** End-of-life announcements :PROPERTIES: :CUSTOM_ID: end-of-life :END: We announce the end-of-life date for a current stable version at the time a new stable version is released. We maintain old branches for at least two years. For GnuPG 2.2 we consider 2.1.0 as the birth of this new stable branch. For most other packages we don't maintain branches and thus there is no end-of-life; always use the latest version. | Package | Ver. | End-of-life | Birth | |-----------+-------+----------------+------------| | | | | | | GnuPG | +1.0+ | 2002-09-07 | 1999-09-07 | | | +1.2+ | 2005-01-01 | 2002-09-21 | | | 1.4 | none (2) | 2004-12-16 | | | +2.0+ | 2017-12-31 | 2006-11-11 | | | 2.2 | 2024-12-31 (1) | 2014-11-06 | | | 2.3 | tba | 2021-04-07 | | Libgcrypt | +1.5+ | 2016-12-31 | 2011-06-29 | | | +1.6+ | 2017-06-30 | 2013-12-16 | | | +1.7+ | 2019-06-30 | 2016-04-15 | | | 1.8 | 2024-12-31 (1) | 2017-07-18 | | | 1.9 | 2024-03-31 | 2021-01-19 | | | 1.10 | tba | 2022-02-01 | - /(1)/: Long Term Support; eol date likely to be prolonged - /(2)/: Legacy version; see remarks above. - /tba/: To be announced. # eof # diff --git a/web/download/integrity_check.org b/web/download/integrity_check.org index 8a7a303..990896e 100644 --- a/web/download/integrity_check.org +++ b/web/download/integrity_check.org @@ -1,128 +1,132 @@ #+TITLE: GnuPG - Integrity Check #+STARTUP: showall #+SETUPFILE: "../share/setup.inc" #+GPGWEB-NEED-SWDB #+OPTIONS: ^:{} * Integrity Check #+index: integrity check You can check that the version of GnuPG that you want to install is original and unmodified by either verifying the file's signature or comparing the checksum with the one published in the release announcement. ** Verifying the File's Signature If you already have a trusted version of GnuPG installed, you can check the supplied signature. For example, to check the signature of the file gnupg-{{{gnupg22_ver}}}.tar.bz2, you can use this command: {{{begin_example}}} $ gpg {{{twodashes}}}verify gnupg-{{{gnupg22_ver}}}.tar.bz2.sig gnupg-{{{gnupg22_ver}}}.tar.bz2 {{{end_example}}} *Note: you should never use a GnuPG version you just downloaded to check the integrity of the source* --- use an existing, trusted GnuPG installation, e.g., the one provided by your distribution. If the output of the above command is similar to the following, then either you don't have our distribution keys (our [[../signature_key.org][signing keys are here]]) or the signature was generated by someone else and the file should be treated suspiciously. {{{begin_example}}} gpg: Signature made Fri 09 Oct 2015 05:41:55 PM CEST using RSA key ID 4F25E3B6 gpg: Can't check signature: No public key gpg: Signature made Tue 13 Oct 2015 10:18:01 AM CEST using RSA key ID 33BD3F06 gpg: Can't check signature: No public key {{{end_example}}} If you instead see: {{{begin_example}}} gpg: Good signature from "Werner Koch (dist sig)" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: D869 2123 C406 5DEA 5E0F 3AB5 249B 39D2 4F25 E3B6 gpg: Signature made Tue 13 Oct 2015 10:18:01 AM CEST using RSA key ID 33BD3F06 gpg: Good signature from "NIIBE Yutaka (GnuPG Release Key) " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 031E C253 6E58 0D8E A286 A9F2 2071 B08A 33BD 3F06 {{{end_example}}} then you have a copy of our keys and the signatures are valid, but either you have not marked the keys as trusted or the keys are a forgery. In this case, at the very least, you should compare the fingerprints that are shown to those on the [[../signature_key.org][signing keys page]]. Even better is to compare the fingerprints with those shown on our business cards, which we handout at events that we attend. Ideally, you'll see something like: {{{begin_example}}} gpg: Signature made Fri 09 Oct 2015 05:41:55 PM CEST using RSA key ID 4F25E3B6 gpg: Good signature from "Werner Koch (dist sig)" [full] gpg: Signature made Tue 13 Oct 2015 10:18:01 AM CEST using RSA key ID 33BD3F06 gpg: Good signature from "NIIBE Yutaka (GnuPG Release Key) " [full] {{{end_example}}} This means that the signature is valid and that you trust this key (either you signed it or someone you trusted did). ** Comparing Checksums If you are not able to use an old version of GnuPG, you can still verify the file's SHA-1 checksum. This is less secure, because if someone modified the files as they were transferred to you, it would not be much more effort to modify the checksums that you see on this webpage. As such, if you use this method, you should compare the checksums with those in release announcement. This is sent to the gnupg-announce mailing list (among others), which is widely mirrored. Don't use the mailing list archive on this website, but find the announcement on several other websites and make sure the checksum is consistent. This makes it more difficult for an attacker to trick you into installing a modified version of the software. Assuming you downloaded the file gnupg-{{{gnupg22_ver}}}.tar.bz2, you can run the =sha1sum= command like this: {{{begin_chksum}}} sha1sum gnupg-{{{gnupg22_ver}}}.tar.bz2 {{{end_chksum}}} and check that the output matches the SHA-1 checksum reported on this site. An example of a =sha1sum= output is: {{{begin_chksum}}} {{{gnupg22_sha1}}} gnupg-{{{gnupg22_ver}}}.tar.bz2 {{{end_chksum}}} ** List of SHA-1 check-sums For your convenience, all SHA-1 check-sums available for software that can be downloaded from [[https://gnupg.org/ftp/][our site]], have been gathered below. {{{begin_chksum}}} + {{{gnupg24_sha1}}} gnupg-{{{gnupg24_ver}}}.tar.bz2 + {{{gnupg24_w32_sha1}}} gnupg-w32-{{{gnupg24_w32_ver}}}.exe {{{gnupg22_sha1}}} gnupg-{{{gnupg22_ver}}}.tar.bz2 {{{gnupg22_w32_sha1}}} gnupg-w32-{{{gnupg22_w32_ver}}}.exe + {{{gnupgdesk_src_sha1}}} gnupg-desktop-{{{gnupgdesk_src_ver}}}.tar.xz + {{{gnupgdesk_ai_sha1}}} gnupg-desktop-{{{gnupgdesk_ai_ver}}}-x86_64.AppImage {{{libgpg_error_sha1}}} libgpg-error-{{{libgpg_error_ver}}}.tar.bz2 {{{libgcrypt_sha1}}} libgcrypt-{{{libgcrypt_ver}}}.tar.bz2 {{{libksba_sha1}}} libksba-{{{libksba_ver}}}.tar.bz2 {{{libassuan_sha1}}} libassuan-{{{libassuan_ver}}}.tar.bz2 {{{ntbtls_sha1}}} ntbtls-{{{ntbtls_ver}}}.tar.bz2 {{{npth_sha1}}} npth-{{{npth_ver}}}.tar.bz2 {{{pinentry_sha1}}} pinentry-{{{pinentry_ver}}}.tar.bz2 {{{gpgme_sha1}}} gpgme-{{{gpgme_ver}}}.tar.bz2 {{{scute_sha1}}} scute-{{{scute_ver}}}.tar.bz2 {{{gpa_sha1}}} gpa-{{{gpa_ver}}}.tar.bz2 {{{dirmngr_sha1}}} dirmngr-{{{dirmngr_ver}}}.tar.bz2 {{{gnupg20_sha1}}} gnupg-{{{gnupg20_ver}}}.tar.bz2 {{{gnupg1_sha1}}} gnupg-{{{gnupg1_ver}}}.tar.bz2 {{{gnupg1_w32cli_sha1}}} gnupg-w32cli-{{{gnupg1_w32cli_ver}}}.exe {{{end_chksum}}} # eof # diff --git a/web/swdb.mac b/web/swdb.mac index 3898836..977e96d 100644 --- a/web/swdb.mac +++ b/web/swdb.mac @@ -1,271 +1,272 @@ # Version information # Please run make in this directory after changing this file. # # Primary FTP server base directory # #+macro: ftp_base ftp://ftp.gnupg.org/gcrypt #+macro: ftp_loc_base /ftp/gcrypt +#+macro: gpgcom_base https://download.gnupg.com/files # # GnuPG-2.4 # # The Git branch of this version: #+macro: gnupg_branch master # #+macro: gnupg24_ver 2.3.8 #+macro: gnupg24_date 2022-10-13 #+macro: gnupg24_size 7465k #+macro: gnupg24_sha1 1f31b7b4c9c9adad97f94ea3acf1aa64c0424bcc #+macro: gnupg24_sha2 540b7a40e57da261fb10ef521a282e0021532a80fd023e75fb71757e8a4969ed #+macro: gnupg24_branch STABLE-BRANCH-2-4 #+macro: gnupg24_w32_ver 2.3.8_20221013 #+macro: gnupg24_w32_date 2022-10-13 #+macro: gnupg24_w32_size 4797k #+macro: gnupg24_w32_sha1 6cfabadbaf15a27988a11e811e9eabb20077b4ff #+macro: gnupg24_w32_sha2 ef179c223990f9dfff2b1e6e9f7468908e0d08b381b3abded2471c29faad234e # # GnuPG-2.2 # #+macro: gnupg22_ver 2.2.40 #+macro: gnupg22_date 2022-10-10 #+macro: gnupg22_size 7130k #+macro: gnupg22_sha1 2a8b52d08cc78e4ebeb07ec2fc8d95e290a3c4a7 #+macro: gnupg22_sha2 1164b29a75e8ab93ea15033300149e1872a7ef6bdda3d7c78229a735f8204c28 #+macro: gnupg22_branch STABLE-BRANCH-2-2 #+macro: gnupg22_w32_ver 2.2.40_20221010 #+macro: gnupg22_w32_date 2022-10-10 #+macro: gnupg22_w32_size 4464k #+macro: gnupg22_w32_sha1 8db42f87e95df6b97c530e5f3cb4760a86dd3cb9 #+macro: gnupg22_w32_sha2 d8d0b47cccd406e288b86fcd08123caf4ba450167ce774f6432dfa4f3032af9b # # GnuPG 2.0 (end-of-life) # #+macro: gnupg20_ver 2.0.31 #+macro: gnupg20_date 2017-12-29 #+macro: gnupg20_size 4324k #+macro: gnupg20_sha1 a7d5021a6a39dd67942e00a1239e37063edb00f0 #+macro: gnupg20_sha2 095558cfbba52fba582963e97b0c016889570b4712d6b871abeef2cf93e62293 #+macro: gnupg20_branch STABLE-BRANCH-2-0 # # GnuPG-1 # #+macro: gnupg1_ver 1.4.23 #+macro: gnupg1_date 2018-06-11 #+macro: gnupg1_size 3661k #+macro: gnupg1_sha1 13747486ed5ff707f796f34f50f4c3085c3a6875 #+macro: gnupg1_sha2 c9462f17e651b6507848c08c430c791287cd75491f8b5a8b50c6ed46b12678ba # #+macro: gnupg1_w32cli_ver 1.4.23 #+macro: gnupg1_w32cli_size 2376k #+macro: gnupg1_w32cli_sha1 d4c9962179d36a140be72c34f34e557b56c975b5 # # Gpg4win # #+macro: gpg4win_ver 4.0.4 #+macro: gpg4win_date 2022-10-17 #+macro: gpg4win_src_size 210M #+macro: gpg4win_src_sha1 8d44abedc71f9b07610f5ad11dffe08c207f40b4 #+macro: gpg4win_src_sha2 56bd3901dee698b48f01dcd368193d2de235a7f18175df39cf0a83923d97a7e3 #+macro: gpg4win_exe_size 31M #+macro: gpg4win_exe_sha1 5069126ab7392a36e0823425459c8e310722c6d4 #+macro: gpg4win_exe_sha2 a750608969a075f132da31f538231ac3a2d3538e3eec8e8603d1573284745d0e # # GnuPG-Desktop # -#+macro: gnupgdesk_ver 2.3.8 -#+macro: gnupgdesk_date 2022-10-17 -#+macro: gnupgdesk_src_size 210M -#+macro: gnupgdesk_src_sha1 8d44abedc71f9b07610f5ad11dffe08c207f40b4 -#+macro: gnupgdesk_src_sha2 56bd3901dee698b48f01dcd368193d2de235a7f18175df39cf0a83923d97a7e3 +#+macro: gnupgdesk_ver 2.3.8.0 +#+macro: gnupgdesk_date 2022-10-19 +#+macro: gnupgdesk_src_size 208M +#+macro: gnupgdesk_src_sha1 e009badda5033943e026de9923e3f2bb56d6a12d +#+macro: gnupgdesk_src_sha2 b2ea14561d413f72e520e0fe37fb739fe359b0aaff381e7ea1940566c7708d20 #+macro: gnupgdesk_ai_size 56M -#+macro: gnupgdesk_ai_sha1 f6875a5b1e6d819ca6e61ccc58cfd4acafde8056 -#+macro: gnupgdesk_ai_sha2 4395510817a90ed322d1e82789eb311f9b4220bc93927f1b26cce0e4b3699877 +#+macro: gnupgdesk_ai_sha1 7651072d7cecedb38b55c533544507b73e770934 +#+macro: gnupgdesk_ai_sha2 98c07cceedb38ded65175dc6885cb85a3f93ec0811409d61dd25508f7e31ad2a # # GPA # #+macro: gpa_ver 0.10.0 #+macro: gpa_date 2018-10-16 #+macro: gpa_size 745k #+macro: gpa_sha1 61475989acd12de8b7daacd906200e8b4f519c5a #+macro: gpa_sha2 95dbabe75fa5c8dc47e3acf2df7a51cee096051e5a842b4c9b6d61e40a6177b1 # # PINENTRY # #+macro: pinentry_ver 1.2.1 #+macro: pinentry_date 2022-08-24 #+macro: pinentry_size 534k #+macro: pinentry_sha1 29daaf45f15cb5b8ec9b4a06284343f7a87082fb #+macro: pinentry_sha2 457a185e5a85238fb945a955dc6352ab962dc8b48720b62fc9fa48c7540a4067 # # GPGME # #+macro: gpgme_ver 1.18.0 #+macro: gpgme_date 2022-08-10 #+macro: gpgme_size 1721k #+macro: gpgme_sha1 d559f7994f9dfd1af611f1f14313b2abbea2a33b #+macro: gpgme_sha2 361d4eae47ce925dba0ea569af40e7b52c645c4ae2e65e5621bf1b6cdd8b0e9e # # LIBGCRYPT # # The Git branch of the stable version: #+macro: libgcrypt_branch LIBGCRYPT-1.10-BRANCH # #+macro: libgcrypt_ver 1.10.1 #+macro: libgcrypt_date 2022-03-28 #+macro: libgcrypt_size 3689k #+macro: libgcrypt_sha1 de2cc32e7538efa376de7bf5d3eafa85626fb95f #+macro: libgcrypt_sha2 ef14ae546b0084cd84259f61a55e07a38c3b53afc0f546bffcef2f01baffe9de # # The 1.8 LTS version. # #+macro: libgcrypt18_ver 1.8.9 #+macro: libgcrypt18_date 2022-02-07 #+macro: libgcrypt18_size 2918k #+macro: libgcrypt18_sha1 2befc36b4cd6979ede5b3761dc51eac8407ba7bd #+macro: libgcrypt18_sha2 2bda4790aa5f0895d3407cf7bf6bd7727fd992f25a45a63d92fef10767fa3769 # # LIBKSBA # #+macro: libksba_ver 1.6.2 #+macro: libksba_date 2022-10-07 #+macro: libksba_size 652k #+macro: libksba_sha1 5e9d2223bfc1d4431594cb4a14f118ba0008cc2e #+macro: libksba_sha2 fce01ccac59812bddadffacff017dac2e4762bdb6ebc6ffe06f6ed4f6192c971 # # DirMngr (not any longer needed) # #+macro: dirmngr_ver 1.1.1 #+macro: dirmngr_date 2013-04-26 #+macro: dirmngr_size 554k #+macro: dirmngr_sha1 e708d4aa5ce852f4de3f4b58f4e4f221f5e5c690 # # LIBGPG-ERROR (aka GPGRT) # #+macro: libgpg_error_ver 1.46 #+macro: libgpg_error_date 2022-10-07 #+macro: libgpg_error_size 990k #+macro: libgpg_error_sha1 a6e5efdd72e848aab4064e5ef4c6835ba344bcf1 #+macro: libgpg_error_sha2 b7e11a64246bbe5ef37748de43b245abd72cfcd53c9ae5e7fc5ca59f1c81268d #+macro: gpgrt_ver 1.46 #+macro: gpgrt_date 2022-10-07 #+macro: gpgrt_size 990k #+macro: gpgrt_sha1 a6e5efdd72e848aab4064e5ef4c6835ba344bcf1 #+macro: gpgrt_sha2 b7e11a64246bbe5ef37748de43b245abd72cfcd53c9ae5e7fc5ca59f1c81268d # # LIBASSUAN # #+macro: libassuan_ver 2.5.5 #+macro: libassuan_date 2021-03-22 #+macro: libassuan_size 558k #+macro: libassuan_sha1 ec4f67c0117ccd17007c748a392ded96dc1b1ae9 #+macro: libassuan_sha2 8e8c2fcc982f9ca67dcbb1d95e2dc746b1739a4668bc20b3a3c5be632edb34e4 # # NTBTLS # #+macro: ntbtls_ver 0.3.1 #+macro: ntbtls_date 2022-04-07 #+macro: ntbtls_size 343k #+macro: ntbtls_sha1 15028002a4c15d47d6037f45637e5ebc73b2ebd1 #+macro: ntbtls_sha2 8922181fef523b77b71625e562e4d69532278eabbd18bc74579dbe14135729ba # # nPth # #+macro: npth_ver 1.6 #+macro: npth_date 2018-07-16 #+macro: npth_size 293k #+macro: npth_sha1 f9d63e9747b027e4e404fe3c20c73c73719e1731 #+macro: npth_sha2 1393abd9adcf0762d34798dc34fdcf4d0d22a8410721e76f1e3afcd1daa4e2d1 # # GpgEX # #+macro: gpgex_ver 1.0.9 #+macro: gpgex_date 2022-04-21 #+macro: gpgex_size 301k #+macro: gpgex_sha1 57d3a965c695ce21a2a8d14028b3fb13db8198ce #+macro: gpgex_sha2 32a31affe0bc2587b6b61c5aae6a3328280feccde315dfa3a3c2dc374c5c0400 # # GpgOL # #+macro: gpgol_ver 2.5.4 #+macro: gpgol_date 2022-09-06 #+macro: gpgol_size 839k #+macro: gpgol_sha1 5f25efee6df5e247bd8684c35c3ff10e49b7d152 #+macro: gpgol_sha2 5c67f6de1098e8b8ccb8deb04ac714a324c6fcba4e51318b522d9158f72c1d0f # # Scute # #+macro: scute_ver 1.7.0 #+macro: scute_date 2021-01-07 #+macro: scute_size 831k #+macro: scute_sha1 3f8a0ba9c7821049d51b982141a2330a246beb55 #+macro: scute_sha2 437fe758b27c243a5ee2535c6b065ea1d09f2c9a02d83567d2f934bb6395c249 # # ADNS # #+macro: adns_ver 1.4-g10-7 #+macro: adns_date 2015-11-20 #+macro: adns_sha1 d2e089d98d3faed6cad009477cc0bc030b35c646 # # zlib (mirrored at our server) # # Signature made Mon 28 Mar 2022 04:34:47 AM CEST # using DSA key 5ED46A6721D365587791E2AA783FCD8E58BCAFBA # Good signature from "Mark Adler " # #+macro: zlib_ver 1.2.12 #+macro: zlib_sha1_gz 207ba741d387e2c1607104cf0bd8cff27deb2605 #+macro: zlib_sha2_gz 91844808532e5ce316b3c010929493c0244f3d37593afd6de04f71821d5136d9 # # bzip2 (mirrored and stripped down version) # #+macro: bzip2_ver 1.0.6-g10 #+macro: bzip2_sha1_gz 6e38be3377340a21a1f13ff84b5e6adce97cd1d4 # # SQLite (mirrored at our server) # #+macro: sqlite_ver 3280000 #+macro: sqlite_sha1_gz 01b9d8fc77085e144dddc87456c9783e53d09a53 # --- end of swdb.mac ---