Why We Occupy

Download

Why We Occupy: Liberty Plaza 2012
Interviews by Olivia Schanzer

ISBN: 978-1-939333-01-8 (electronic edition)

The TEI Lite source code package is accompanied by a signature file which can be used to verify that the code contained in the package is free of corruption or tampering. The signature was created using GnuPG, a command-line program that is freely available on various operating systems.

Gzip Format

• wwo_teilite-1.1.tar.gz - TAR archive compressed using gzip
• wwo_teilite-1.1.tar.gz.sig - PGP signature
• wwo_teilite-1.1.tar.gz.asc - PGP signature (ASCII armor encoding)

Bzip2 Format

• wwo_teilite-1.1.tar.bz2 - TAR archive compressed using bzip2
• wwo_teilite-1.1.tar.bz2.sig - PGP signature
• wwo_teilite-1.1.tar.bz2.asc - PGP signature (ASCII armor encoding)

Verifying the Signature

The first step in verifying the signature is to retrieve the public key for Matchlock Press by running the following command on the command line:

$ gpg --recv-keys 6537BD0C

The 8-digit hexadecimal number 6537BD0C is the key ID. You should receive a response like the following:

gpg: requesting key 6537BD0C from hkp server keys.gnupg.net
gpg: key 6537BD0C: public key "Keymaster <keymaster@matchlock.com>" imported
gpg: Total number processed: 1
gpg: imported: 1 (RSA: 1)


The next step is to verify the signature. Run

$ gpg --verify wwo.tar.bz2.sig wwo.tar.bz2

The response should contain a line like

Good signature from "Keymaster <keymaster@matchlock.com>"

In the example, keys.gnupg.net is the default keyserver for gnupg keys. To download a copy of the key from the World Wide Web, visit the MIT PGP Public Key Sever and search for “matchlock.” ❖