diff --git a/docs/README.md b/docs/README.md index f97d005..845be61 100644 --- a/docs/README.md +++ b/docs/README.md @@ -68,12 +68,12 @@ Go to https://github.com/settings/keys, click “New GPG key”, paste your PGP ### Step 2: enable Git [signing](https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work) -Replace `0xC1323A377DE14C8B` with your PGP public key ID. +Replace `0x8C9CA674C47CA060` with your PGP public key ID. ```shell git config --global commit.gpgsign true git config --global gpg.program $(which gpg) -git config --global user.signingkey 0xC1323A377DE14C8B +git config --global user.signingkey 0x8C9CA674C47CA060 ``` ### Step 3: submit pull request diff --git a/how-to-clean-uninstall-macos-apps-using-appcleaner-open-source-alternative/app-cleaner.sh.asc b/how-to-clean-uninstall-macos-apps-using-appcleaner-open-source-alternative/app-cleaner.sh.asc index 226de1e..9fd6d1d 100644 --- a/how-to-clean-uninstall-macos-apps-using-appcleaner-open-source-alternative/app-cleaner.sh.asc +++ b/how-to-clean-uninstall-macos-apps-using-appcleaner-open-source-alternative/app-cleaner.sh.asc @@ -1,16 +1,7 @@ -----BEGIN PGP SIGNATURE----- -iQIzBAABCgAdFiEEqYzNEiJDZVsm+vthH6dnhiu9EwUFAmDDcgIACgkQH6dnhiu9 -EwVr9Q//U09IvTLhYMGknXOLQgrjkf8IyKqu0eCIe66VBKqNbPIPUPg5TiYdDwe1 -tQn51z9hvclv7IKeYhKVqFSBeMYyRjpLTtggpmXsJrJ/jswUM8VDxJzDpEpxYUaT -4Vyf3NFPYSQiO8v17/smc12qLn+fwAMZIxEE8hD/zy+/ZKbcfSi5uV19sEzd73SJ -XPqc/52w8s3j86lOZ3ohGY69ixyOpqAOb30EfoboMfkYMeMcyjBp7+PklyWVj1iN -WPNbFbcVCO3B0PQhmfdJyb1nxAQLPcBcSXMCCDeEVDlU37OQKqKaoASWZyb1Pv9d -RORt47pKcJetCqIJLA5IaRLZjYu38QDYOjJmuZ99j+4S7Wup3aprKifc+IF3/mi2 -KxpOc9vgF4SRW8VQQgGOSiXsn7Fm4ZPkLoYjH0S6Kg5iGmxLQm6JWtvl+W54ySij -Gmz4gJfsM0CmN92hZL5mr2GQKT3WXHVtMMCZfL/oSd0BtF2AobNSoRnyzZTJlQZt -hSFDrlQRyU6jFpGn4m8Fsh8YguOFjluf4mWv/XZccSXK27q6edtRkJQwZcZgpw3O -HTeYXGYxKOqr+A1qjlites9EJgfahgLcDESRJmnuXMLzjEIvM0Uwg+vDXEw+gdzw -XneIoU4oix8xGO5X3878oyLR7JcY7kWLRY8CNhXJe+Ke+swk2xk= -=D+jg +iHUEABYKAB0WIQSceIfhtfy84t/tDhwCxDrQctV3gwUCYcyB1QAKCRACxDrQctV3 +g7SrAPwOgQvuoZXYby208xHk088zt9JdRvajFQIYe4MX48g+8QD7BpgDROEGmeYD +Uyoa4RBpzdjxPJC37QYgE88CfW8BqAE= +=f9Sw -----END PGP SIGNATURE----- diff --git a/how-to-verify-pgp-digital-signatures-using-gnupg-on-macos/README.md b/how-to-verify-pgp-digital-signatures-using-gnupg-on-macos/README.md index 87d00ba..9f52935 100644 --- a/how-to-verify-pgp-digital-signatures-using-gnupg-on-macos/README.md +++ b/how-to-verify-pgp-digital-signatures-using-gnupg-on-macos/README.md @@ -14,7 +14,7 @@ Listed: true ## Requirements -- Computer running macOS Catalina or Big Sur +- Computer running macOS Big Sur or Monterey ## Caveats @@ -48,13 +48,13 @@ brew install gnupg ## Usage guide -### Import signer’s public key using key server… +### Import signer’s PGP public key using key server… -Replace `0xC1323A377DE14C8B` with signer’s public key ID. +Replace `0x8C9CA674C47CA060` with signer’s public key ID. ```console -$ gpg --keyserver hkps://keys.openpgp.org --recv-keys 0xC1323A377DE14C8B -gpg: key 0xC1323A377DE14C8B: public key "Sun Knudsen " imported +$ gpg --keyserver hkps://keys.openpgp.org --recv-keys 0x8C9CA674C47CA060 +gpg: key 8C9CA674C47CA060: public key "Sun Knudsen " imported gpg: Total number processed: 1 gpg: imported: 1 ``` @@ -63,7 +63,7 @@ imported: 1 👍 -### …or using public key URL +### …or using PGP public key URL Replace `https://sunknudsen.com/sunknudsen.asc` with signer’s public key URL. @@ -71,19 +71,22 @@ Replace `https://sunknudsen.com/sunknudsen.asc` with signer’s public key URL. $ curl https://sunknudsen.com/sunknudsen.asc | gpg --import % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed -100 6896 100 6896 0 0 11589 0 --:--:-- --:--:-- --:--:-- 11570 -gpg: key 0xC1323A377DE14C8B: public key "Sun Knudsen " imported +100 2070 100 2070 0 0 1881 0 0:00:01 0:00:01 --:--:-- 1899 +gpg: key 8C9CA674C47CA060: 1 signature not checked due to a missing key +gpg: key 8C9CA674C47CA060: public key "Sun Knudsen " imported gpg: Total number processed: 1 gpg: imported: 1 +gpg: marginals needed: 3 completes needed: 1 trust model: pgp +gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u ``` imported: 1 👍 -### Verify signer’s public key using fingerprint +### Verify signer’s PGP public key using fingerprint -Replace `hello@sunknudsen.com` with signer’s email and use published fingerprints or web of trust to verify signer’s fingerprint (see [example](../how-to-encrypt-sign-and-decrypt-messages-using-gnupg-on-macos#verify-suns-pgp-public-key-using-its-fingerprint)). +Replace `hello@sunknudsen.com` with signer’s email and use published fingerprints to verify signer’s cryptographic identity (learn how [here](../how-to-encrypt-sign-and-decrypt-messages-using-gnupg-on-macos#verify-suns-pgp-public-key-using-fingerprint)). ```console $ gpg --fingerprint hello@sunknudsen.com @@ -102,13 +105,13 @@ sub rsa4096 2019-10-17 [S] [expires: 2021-10-25] ```console $ gpg --verify donate-bitcoin.asc -gpg: Signature made Sun 7 Mar 14:58:01 2021 EST -gpg: using RSA key A98CCD122243655B26FAFB611FA767862BBD1305 +gpg: Signature made Wed 29 Dec 10:32:32 2021 EST +gpg: using EDDSA key 9C7887E1B5FCBCE2DFED0E1C02C43AD072D57783 gpg: Good signature from "Sun Knudsen " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. -Primary key fingerprint: C4FB DDC1 6A26 2672 920D 0A0F C132 3A37 7DE1 4C8B - Subkey fingerprint: A98C CD12 2243 655B 26FA FB61 1FA7 6786 2BBD 1305 +Primary key fingerprint: E786 274B C92B 47C2 3C1C F44B 8C9C A674 C47C A060 + Subkey fingerprint: 9C78 87E1 B5FC BCE2 DFED 0E1C 02C4 3AD0 72D5 7783 ``` Good signature @@ -120,13 +123,13 @@ Good signature ```console $ gpg --verify app-cleaner.sh.asc gpg: assuming signed data in 'app-cleaner.sh' -gpg: Signature made Wed 17 Mar 09:57:42 2021 EDT -gpg: using RSA key A98CCD122243655B26FAFB611FA767862BBD1305 +gpg: Signature made Wed 29 Dec 10:42:13 2021 EST +gpg: using EDDSA key 9C7887E1B5FCBCE2DFED0E1C02C43AD072D57783 gpg: Good signature from "Sun Knudsen " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. -Primary key fingerprint: C4FB DDC1 6A26 2672 920D 0A0F C132 3A37 7DE1 4C8B - Subkey fingerprint: A98C CD12 2243 655B 26FA FB61 1FA7 6786 2BBD 1305 +Primary key fingerprint: E786 274B C92B 47C2 3C1C F44B 8C9C A674 C47C A060 + Subkey fingerprint: 9C78 87E1 B5FC BCE2 DFED 0E1C 02C4 3AD0 72D5 7783 ``` Good signature