diff options
| author | David Tolnay <dtolnay@gmail.com> | 2015-10-11 22:11:52 -0700 |
|---|---|---|
| committer | David Tolnay <dtolnay@gmail.com> | 2015-10-12 20:57:53 -0700 |
| commit | 64ade137bce55f283c2c70f172db904411b39e68 (patch) | |
| tree | 69789cb9fa19f2c89bd72c03aca7b94adee88f48 /docs | |
| parent | da15e10bd0997fb5c1a61cad7fdfe0786fec17e9 (diff) | |
PGP signatures for release binaries (fix #889)
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/content/2.download/default.yml | 21 |
1 files changed, 16 insertions, 5 deletions
diff --git a/docs/content/2.download/default.yml b/docs/content/2.download/default.yml index 07fa06c5..98b0b909 100644 --- a/docs/content/2.download/default.yml +++ b/docs/content/2.download/default.yml @@ -101,11 +101,22 @@ body: or [32-bit](https://github.com/stedolan/jq/releases/download/jq-1.3/jq-win32.exe). - ### Checksums - - See - [sha1sum.txt](https://raw.githubusercontent.com/stedolan/jq/master/sha1sum.txt) - for SHA-1 checksums of the binaries linked above. + ### Checksums and signatures + + SHA-256 checksums are provided for all release and pre-release binaries. + They can be found under + [sig/v1.x/sha256sum.txt](https://github.com/stedolan/jq/tree/master/sig). + The checksums for jq 1.5 are in + [sig/v1.5/sha256sum.txt](https://raw.githubusercontent.com/stedolan/jq/master/sig/v1.5/sha256sum.txt). + + Additionally, all binaries are signed by the + [jq Package Signing Key](https://raw.githubusercontent.com/stedolan/jq/master/sig/jq-release.key). + The signatures can be found under + [sig/v1.x/\*.asc](https://github.com/stedolan/jq/tree/master/sig). + The signatures for jq 1.5 are in + [sig/v1.5/\*.asc](https://github.com/stedolan/jq/tree/master/sig/v1.5). + You can use [GnuPG](https://gnupg.org/) to verify a signature by downloading + the signature and running `gpg --verify signature.asc`. ### From source on Linux, OS X, Cygwin, and other POSIX-like operating systems |