hadoop学习笔记之一：文件完整性验证gpg --verify

jtbrian

于 2016-08-09 17:21:27 发布

阅读量3.7k

点赞数

CC 4.0 BY-SA版权

分类专栏： hadoop 文章标签： hadoop gpg 大数据 verify

本文链接：https://blog.csdn.net/jtbrian/article/details/52164535

hadoop 专栏收录该内容

3 篇文章

订阅专栏

这篇博客介绍了如何通过gpg工具验证Hadoop文件的完整性。首先，下载签名文件并使用gpg –verify命令进行验证，遇到public key not found错误后，从keyserver获取public key，再重新验证。最后，成功验证文件由Sander Striker签名。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1.下载签名文件，然后用gpg –verify命令
% gpg –verify httpd-2.0.44.tar.gz.asc httpd-2.0.44.tar.gz
gpg: Signature made Sat Jan 18 07:21:28 2003 PST using DSA key ID DE885DD3
gpg: Can’t check signature: public key not found
此时会报错：public key not found

2.获取public key
% gpg –keyserver pgpkeys.mit.edu –recv-key DE885DD3
gpg: requesting key DE885DD3 from HKP keyserver pgpkeys.mit.edu
gpg: trustdb created
gpg: key DE885DD3: public key “Sander Striker striker@apache.org” imported
gpg: Total number processed: 1
gpg:imported: 1

3.重新验证
% gpg –verify httpd-2.0.44.tar.gz.asc httpd-2.0.44.tar.gz
gpg: Signature made Sat Jan 18 07:21:28 2003 PST using DSA key ID DE885DD3
gpg: Good signature from “Sander Striker striker@apache.org”
gpg: aka “Sander Striker striker@striker.nl”
gpg: checking the trustdb
gpg: no ultimately trusted keys found
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Fingerprint: 4C1E ADAD B4EF 5007 579C 919C 6635 B6C0 DE88 5DD3