Name | Modified | Size | Downloads / Week |
---|---|---|---|
Parent folder | |||
13.0-RELEASE | 2024-01-23 | ||
13.1-RELEASE | 2024-01-23 | ||
readme.txt | 2024-01-23 | 1.4 kB | |
Totals: 3 Items | 1.4 kB | 0 |
FreeBSD packages themselves are not signed, but the packagesite.txz and meta.txz are. Some repository tools live in "rhubarb-pi-repo-tools" to assist. Verify the fingerprint of the public key: $ repo-verify fingerprint -file packagesite.txz befaf7a4400e71f9f9507783d8b56eaa53ad90e593f265d17bd2596b7bfc1f0f Confirm that the contained signature is consistent with the content file and key $ repo-verify verify -file packagesite.txz -name packagesite.yaml Verified OK Show the contents so you can verify the hashes $ repo-list packagesite.txz 61af3ee9ef3235287bac3ae59e7d3a806cfd17ea9c1c8f8c08cff96ebdeb9126 rhubarb-pi-repo-tools-1.0.2.txz rhubarb-pi-repo-tools 1.0.2 FreeBSD:13:* freebsd:13:* d3c9883f75928496a9eae24c1c91e68581151c9e7c6d595f9d0606a6fc24f253 ksh93-93.u_1.txz ksh93 93.u_1 FreeBSD:13:aarch64 freebsd:13:aarch64:64 a48cc6bb24a74b665b19dc57aa7141560ae47c1e5b581f07c12744f42768501d cdesktopenv-2.3.2b.f294ef4a_1.txz cdesktopenv 2.3.2b.f294ef4a_1 FreeBSD:13:aarch64 freebsd:13:aarch64:64 $ sha256 r* k* c* SHA256 (rhubarb-pi-repo-tools-1.0.2.txz) = 61af3ee9ef3235287bac3ae59e7d3a806cfd17ea9c1c8f8c08cff96ebdeb9126 SHA256 (ksh93-93.u_1.txz) = d3c9883f75928496a9eae24c1c91e68581151c9e7c6d595f9d0606a6fc24f253 SHA256 (cdesktopenv-2.3.2b.f294ef4a_1.txz) = a48cc6bb24a74b665b19dc57aa7141560ae47c1e5b581f07c12744f42768501d The repo-verify tool is shell script so you can validate how it checks the signatures.