Download¶
Current Development Version¶
Integrity Check¶
There are hashes (MD5, SHA1 and SHA256) of the download packages stored in the digests file. In order to check the integrity of the downloaded file, use a tool like md5sum (or sha1sum, sha256sum accordingly), e.g.:
$ md5sum -c pyliblinear-220.dev2.digests
pyliblinear-220.dev2.tar.bz2: OK
pyliblinear-220.dev2.tar.gz: OK
pyliblinear-220.dev2.tar.xz: OK
pyliblinear-220.dev2.zip: OK
In order to check the integrity of the digest file itself, you can check the PGP signature of that file. The file is signed by André Malo, Key-ID 0x8103A37E:
$ gpg --verify pyliblinear-220.dev2.digests
gpg: Signature made Sun Jul 8 21:58:21 2018 CEST using DSA key ID 8103A37E
gpg: Good signature from "Andre Malo <nd@apache.org>"
gpg: aka "Andr\xe9\x20Malo <nd@perlig.de>"
gpg: aka "Andre Malo <ndparker@gmx.net>"