Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2025-02-03 01:50:04 -05:00
Code Issues Packages Projects Releases Wiki Activity

Clarify language; shorten forum link

Browse Source
This commit is contained in:
Andrew David Wong 2022-09-12 23:51:47 -07:00
parent d4f96d6381
commit 13ccb403cb
No known key found for this signature in database
GPG Key ID: 8CE137352A019A17
1 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
project-security/verifying-signatures.md
View File

@ -108,7 +108,8 @@ never leave this isolated machine.
Before we proceed, you must first complete the prerequisite step of [installing Before we proceed, you must first complete the prerequisite step of [installing
OpenPGP software](#openpgp-software). OpenPGP software](#openpgp-software).
Now, there are several ways to get the QMSK. Once you have appropriate OpenPGP software installed, there are several ways to
get the QMSK.
- If you're on Qubes OS, it's available in every - If you're on Qubes OS, it's available in every
qube ([except dom0](https://github.com/QubesOS/qubes-issues/issues/2544)): qube ([except dom0](https://github.com/QubesOS/qubes-issues/issues/2544)):
@ -194,7 +195,7 @@ Here are some ideas for how to do that:
- Check the fingerprint on various websites (e.g., [mailing - Check the fingerprint on various websites (e.g., [mailing
lists](https://groups.google.com/g/qubes-devel/c/RqR9WPxICwg/m/kaQwknZPDHkJ), lists](https://groups.google.com/g/qubes-devel/c/RqR9WPxICwg/m/kaQwknZPDHkJ),
[discussion [discussion
forums](https://forum.qubes-os.org/t/there-is-no-way-to-validate-qubes-master-signing-key/1441/9?u=adw), forums](https://forum.qubes-os.org/t/1441/9),
[social](https://twitter.com/rootkovska/status/496976187491876864) [social](https://twitter.com/rootkovska/status/496976187491876864)
[media](https://www.reddit.com/r/Qubes/comments/5bme9n/fingerprint_verification/), [media](https://www.reddit.com/r/Qubes/comments/5bme9n/fingerprint_verification/),
[personal websites](https://andrewdavidwong.com/fingerprints.txt)). [personal websites](https://andrewdavidwong.com/fingerprints.txt)).
@ -292,12 +293,13 @@ Before we proceed, you must first complete the following prerequisite steps:
1. [Install OpenPGP software.](#openpgp-software) 1. [Install OpenPGP software.](#openpgp-software)
2. [Import and authenticate the QMSK.](#how-to-import-and-authenticate-the-qubes-master-signing-key) 2. [Import and authenticate the QMSK.](#how-to-import-and-authenticate-the-qubes-master-signing-key)
The first step is to obtain the correct RSK. The filename of the RSK for your After you have completed these two prerequisite steps, the next step is to
Qubes OS release is usually `qubes-release-X-signing-key.asc`, where `X` is the obtain the correct RSK. The filename of the RSK for your Qubes OS release is
[major version number](https://semver.org/) of your Qubes release. For example, usually `qubes-release-X-signing-key.asc`, where `X` is the [major version
if you were installing release `1.2.3`, you would replace `X` with `1`, number](https://semver.org/) of your Qubes release. For example, if you were
resulting in `qubes-release-1-signing-key.asc`. There are several ways to get installing release `1.2.3`, you would replace `X` with `1`, resulting in
the RSK for your Qubes release. `qubes-release-1-signing-key.asc`. There are several ways to get the RSK for
your Qubes release.
- If you have access to an existing Qubes installation, the release keys are - If you have access to an existing Qubes installation, the release keys are
available in dom0 in `/etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-*`. These can be available in dom0 in `/etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-*`. These can be