From 4e76c6561dca71fc758399fdd21f7f7bd2b5da6d Mon Sep 17 00:00:00 2001 From: John-Mark Gurney Date: Fri, 18 Oct 2019 14:03:30 -0700 Subject: [PATCH] put in the full fingerprint to make spoofing harder, and include the full command to import the key to make it easy for people who don't know gpg well. --- snapaid.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/snapaid.sh b/snapaid.sh index a6e8417..155f96d 100755 --- a/snapaid.sh +++ b/snapaid.sh @@ -28,7 +28,7 @@ # STOREDIR="$HOME/.snapaid" -KEYS="0x524F0C37A0B946A3" +KEYS="78B342BA26C7B2AC681EA7BE524F0C37A0B946A3" KEY_URLS='https://svnweb.freebsd.org/doc/head/share/pgpkeys/gjb.key?view=co' setdefaults() { @@ -280,7 +280,9 @@ if ! check_keys; then echo "$i" done echo "" - echo "and imported into GPG w/ the --import option." + echo "and imported into GPG w/ the --import option. This can be" + echo "done via the command:" + echo "fetch -o - $KEY_URLS | gpg --import -" echo "" echo "For extra security, additional verification should be done, such" echo "as manually verifying finger prints."