Re: [Burp-users] 2.1.32 'stable' and 2.2.20 'latest' are now available

[Josef V. <j....@fl...>]

Am 01.04.2018 um 07:13 schrieb Graham Keeling:
> Hello,
>   
> I have uploaded burp-2.1.32 and burp-2.2.0 to sourceforge.
> Here is the link: http://sourceforge.net/projects/burp/files/
>
> I am now trying to provide gpg signatures. They can be found on the
> sourceforge pages, and my public key is available from this page:
> https://burp.grke.net/download.html
> It would be useful if somebody can let me know if these work for them!

Hello
Thanks for the new release, Graham! I just tested the signature. Here 
are the steps for Windows (in case someone wants to try also):
- Download an install gpg4win https://www.gpg4win.org/
- Download burp-winXX-installer-2.2.0.exe and 
burp-winXX-installer-2.2.0.exe.asc
- Download the public key from graham
- Open a command line prompt
- Change to the directory where the files are downloaded
- gpg.exe --import burp.key (use the installed path for gpg.exe, e.g. 
C:\Program Files (x86)\GnuPG\bin\gpg.exe")
- gpg.exe --verify burp-winXX-installer-2.2.0.exe.asc
gpg: assuming signed data in 'burp-win64-installer-2.2.0.exe'
gpg: Signature made 04/01/18 06:50:06
gpg:                using RSA key 28386B441AB24FD49766FBF73A68D2214C21357C
gpg: Good signature from "Graham Keeling <gr...@gr...>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the 
owner.
Primary key fingerprint: 2838 6B44 1AB2 4FD4 9766  FBF7 3A68 D221 4C21 357C

The important line here is:
gpg: Good signature from "Graham Keeling <gr...@gr...>"

Best regards
Josef