PirateNetwork/pirate

Change README instructions for verification of wallets

Opened this issue · 1 comments

Deleted user commented

This directory contains the hashes and signatures for pirate

Verify the hashes by running:
sha256sum -c sha256sum-vX.Y.Z.txt

Verify signatures:

  1. First, import the public key (Available on GitHub
    at https://github.com/piratenetwork/pirate/blob/master/public_key.asc)
    gpg --import public_key.asc

  2. Verify signature
    gpg --verify <filename.sig>

Should look something like this:

  • Generate checksum of downloaded wallet and compare to sha256-[version].txt

sha256sum [wallet.deb]

sha256sum pirate-qt-ubuntu1804-v5.5.0.deb

  • Check if checksums match "OK" means they do. or check if checksum of wallet filename matchs that of same filename in sha256.txt

sha256sum --ignore-missing -c sha256-[version].txt

sha256sum --ignore-missing -c sha256sum-v5.5.0.txt 2> /dev/null | grep -e OK

$pirate-qt-ubuntu1804-v5.5.0.deb: OK

Verify signatures:

wget https://raw.githubusercontent.com/PirateNetwork/pirate/master/public_key.asc

  • Verify signature
    gpg --verify <filename.sig>

  • Verify GPG of checksum

gpg --verify sha256sum-[version].txt.sig sha256sum-[version].txt

gpg --verify sha256sum-v5.5.0.txt.sig sha256sum-v5.5.0.txt

  • Verify GPG of Wallet

gpg --verify pirate-qt-ubuntu1804-[version].deb.sig pirate-qt-ubuntu1804-[version].deb

gpg --verify pirate-qt-ubuntu1804-v5.5.0.deb.sig pirate-qt-ubuntu1804-v5.5.0.deb

gpg: Signature made Sun 12 Jun 2022 10:39:17 PM UTC
gpg: using RSA key B5802C26DDF72E5D913C07AE10C0005A76EC1CF3
gpg: Good signature from "Pirate Signing Key cryptoforge.cc@protonmail.com" [unknown]

If you see this it has been verify with gpg

Also add documentation for non-linux users: Windows & MacOS

TheComputerGenie commented

Also add documentation for non-linux users: Windows & MacOS

The gpg usage is the same