GPG verification

GNU Privacy Guard (GPG) is a free, open-source cryptographic tool that uses encryption and signing to secure data and communication. We use it to protect the integrity and confidentiality of OrgonWeb source files.

Verification process

1. Import OrgonWeb pubKey

• OrgonWeb pubKey: 4371 AB85 E5A5 8FAA 88AD 7FDF 9945 DBCA 8C4B B810
• OrgonWeb uid: [email protected]
• Run Command gpg --keyserver hkp://keys.openpgp.org --recv-keys 4371AB85E5A58FAA88AD7FDF9945DBCA8C4BB810 to import pubKey.

2. Download files

• Download URL: https://github.com/alexozerov/orgonweb/releases
• Download the same version of the OrgonWeb source file and the sig file. For example tronweb-6.0.0-beta.4.zip and tronweb-6.0.0-beta.4.sig.

3. Verify signature

• Run command gpg --verify tronweb-6.0.0-beta.4.zip.sig tronweb-6.0.0-beta.4.zip.
• Remember to replace the sig file and the source file with your downloaded version of them.
• If the result shows Good signature then the source file is untampered or it will show BAD signature.