This file is indexed.

/usr/share/doc/gnupg-doc/mini-HOWTO/GPGMiniHowto-5.html is in gnupg-doc 2003.04.06+dak1-1ubuntu1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
 <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.69">
 <TITLE>GNU Privacy Guard (GnuPG) Mini Howto (English): Signing and checking signatures</TITLE>
 <LINK HREF="GPGMiniHowto-6.html" REL=next>
 <LINK HREF="GPGMiniHowto-4.html" REL=previous>
 <LINK HREF="GPGMiniHowto.html#toc5" REL=contents>
</HEAD>
<BODY>
<A HREF="GPGMiniHowto-6.html">Next</A>
<A HREF="GPGMiniHowto-4.html">Previous</A>
<A HREF="GPGMiniHowto.html#toc5">Contents</A>
<HR>
<H2><A NAME="GPG-Minihowto-signatures"></A> <A NAME="s5">5.</A> <A HREF="GPGMiniHowto.html#toc5">Signing and checking signatures</A></H2>


<P>To sign data with your own key, use the command:
<BLOCKQUOTE><CODE>
<PRE>
gpg -s (or --sign) [Data]
</PRE>
</CODE></BLOCKQUOTE>

By doing this also compression takes place. This means that the result is not
legible. If you want a legible result you can use: </P>
<P>
<BLOCKQUOTE><CODE>
<PRE>
gpg --clearsign [Data]
</PRE>
</CODE></BLOCKQUOTE>
 
this will make sure that the results are clearly legible. Furthermore it does 
the same (signing data).</P>
<P>With
<BLOCKQUOTE><CODE>
<PRE>
gpg -b (or --detach-sign) [Data]
</PRE>
</CODE></BLOCKQUOTE>
 
you can write the signature in a separate file. It is highly recommended to use
this option especially when signing binary files (like archives for instance). 
Also the <CODE>--armor</CODE> option can be extremely useful here.</P>

<P>Quite often you find that data is encrypted and signed as well. The full 
instruction looks like:
<BLOCKQUOTE><CODE>
<PRE>
gpg [-u Sender] [-r Recipient] [--armor] --sign --encrypt [Data]
</PRE>
</CODE></BLOCKQUOTE>
</P>
<P>The functionality of the options <CODE>-u</CODE> (<CODE>--local-user</CODE>) and <CODE>-r</CODE> 
(<CODE>--recipient</CODE>) are as described before.</P>

<P>When encrypted data has been signed as well, the signature is checked when the
data is decrypted. You can check the signature of signed data by using the command:
<BLOCKQUOTE><CODE>
<PRE>
gpg [--verify] [Data]
</PRE>
</CODE></BLOCKQUOTE>

This will only work (of course) when you own the public key of the sender.</P>

<HR>
<A HREF="GPGMiniHowto-6.html">Next</A>
<A HREF="GPGMiniHowto-4.html">Previous</A>
<A HREF="GPGMiniHowto.html#toc5">Contents</A>
</BODY>
</HTML>