X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=FAQ;h=fd354b3b40234701678cf99aca1b818835cd84b7;hp=463bc1e139668685b19e2d41f03e110fa9976aa5;hb=a842df6659e1a9dd98bdab61cf2fd4682dfb70ad;hpb=559f90ff6020654fd9fed0614cdae8f082f237cd diff --git a/FAQ b/FAQ index 463bc1e139..fd354b3b40 100644 --- a/FAQ +++ b/FAQ @@ -152,7 +152,8 @@ Use MD5 to check that a tarball from a mirror site is identical: md5sum TARBALL | awk '{print $1;}' | cmp - TARBALL.md5 You can check authenticity using pgp or gpg. You need the OpenSSL team -member public key used to sign it (download it from a key server). Then +member public key used to sign it (download it from a key server, see a +list of keys at ). Then just do: pgp TARBALL.asc