Re: [be] Verification of release tar balls

[Teus Benschop]

On Fri, 2010-09-24 at 18:03 +0100, David Gardner wrote:
> I don't know if you have gpg set up,  but if you have then you could also
> sign these files (on the build computer, which is not the web server,
> I hope). Then there would be proof that the server hasn't been compromised.

The build computer is different from the web server. The scripts given
by Jonathan were excellent. They made it easy to at once grasp the idea
for making the sums. If there are similar scripts for doing the signing
with GnuPG, that would help greatly. Teus.