Download¶

Source Packages¶

Current Stable Version¶

Integrity Check¶

There are hashes (MD5, SHA1 and SHA256) of the download packages stored in the digests file. In order to check the integrity of the downloaded file, use a tool like md5sum (or sha1sum, sha256sum accordingly), e.g.:

$ md5sum -c wtf-0.8.24.digests
wtf-0.8.24.tar.bz2: OK
wtf-0.8.24.tar.gz: OK
wtf-0.8.24.tar.lzma: OK
wtf-0.8.24.zip: OK

In order to check the integrity of the digest file itself, you can check the PGP signature of that file. The file is signed by André Malo, Key-ID 0x8103A37E:

$ gpg --verify wtf-0.8.24.digests
gpg: Signature made Wed Jan 27 17:54:44 2016 CET using DSA key ID 8103A37E
gpg: Good signature from "Andre Malo <nd@apache.org>"
gpg:                 aka "Andr\xe9\x20Malo <nd@perlig.de>"
gpg:                 aka "Andre Malo <ndparker@gmx.net>"

Vendor Packages¶

There are no vendor packages available right now.