Kernel cryptographically authenticated
Message ID: 24896
Posted By: mcbride4prison
Posted On: 2003-08-07 15:20:00
Subject: Kernel cryptographically authenticated
Recs: 0
And just to make completely sure that the kernel as downloaded from SCO is actually a real prestine linux kernel, I went through the "trouble" of extracting it and checking the signature. Here is an edited log (I've removed misstypings and such):
mcbride4prison@nynaeve:~$ wget http://www.iagora.com/~espel/rpm2cpio
--21:06:57-- http://www.iagora.com/%7Eespel/rpm2cpio
=> `rpm2cpio'
Resolving www.iagora.com... done.
Connecting to www.iagora.com[212.100.224.114]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3,114 [text/plain]
100%[=================================================================>] 3,114 56.32K/s ETA 00:00
21:06:57 (56.32 KB/s) - `rpm2cpio' saved [3114/3114]
mcbride4prison@nynaeve:~$ chmod +x rpm2cpio
mcbride4prison@nynaeve:~$ ./rpm2cpio linux-2.4.13-21S.src.rpm >sco.cpio
CPIO archive found!
mcbride4prison@nynaeve:~$ cpio -i --file sco.cpio
54674 blocks
mcbride4prison@nynaeve:~$ wget http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.13.tar.bz2.sign
--21:11:23-- http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.13.tar.bz2.sign
=> `linux-2.4.13.tar.bz2.sign'
Resolving www.kernel.org... done.
Connecting to www.kernel.org[204.152.189.116]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 248 [application/pgp-signature]
100%[=================================================================>] 248 242.19K/s ETA 00:00
21:11:23 (242.19 KB/s) - `linux-2.4.13.tar.bz2.sign' saved [248/248]
mcbride4prison@nynaeve:~$ gpg --keyserver wwwkeys.pgp.net --recv-keys 0x517D0F0E
gpg: /home/mcbride4prison/.gnupg: directory created
gpg: new configuration file `/home/mcbride4prison/.gnupg/gpg.conf' created
gpg: keyring `/home/mcbride4prison/.gnupg/secring.gpg' created
gpg: keyring `/home/mcbride4prison/.gnupg/pubring.gpg' created
gpg: key 517D0F0E: removed multiple subkey binding
gpg: /home/mcbride4prison/.gnupg/trustdb.gpg: trustdb created
gpg: key 517D0F0E: public key "Linux Kernel Archives Verification Key< ftpadmin@kernel.org>" imported
gpg: Total number processed: 1
gpg: imported: 1
mcbride4prison@nynaeve:~$ gpg --verify linux-2.4.13.tar.bz2.sign linux-2.4.13.tar.bz2
gpg: Signature made Wed Oct 24 07:32:44 2001 CEST using DSA key ID 517D0F0E
gpg: Good signature from "Linux Kernel Archives Verification Key <ftpadmin@kernel.org>"
gpg: checking the trustdb
gpg: no ultimately trusted keys found
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: C75D C40A 11D7 AF88 9981 ED5B C86B A06A 517D 0F0E
And there you have it, the kernel from SCO is the same official one that's available at kernel.org
Feel free to use this if someone ever questions whether or not SCO is still distributing the GPL'ed kernel!
------------------------------------------------------------
The text of this Yahoo Message Board post has been licensed for
copying and distribution by the Yahoo Message Board user
"mcbride4prison" under the following license:
License: CC Attribution-NonCommercial-ShareAlike v2.0
------------------------------------------------------------
Posted By: mcbride4prison
Posted On: 2003-08-07 15:20:00
Subject: Kernel cryptographically authenticated
Recs: 0
And just to make completely sure that the kernel as downloaded from SCO is actually a real prestine linux kernel, I went through the "trouble" of extracting it and checking the signature. Here is an edited log (I've removed misstypings and such):
mcbride4prison@nynaeve:~$ wget http://www.iagora.com/~espel/rpm2cpio
--21:06:57-- http://www.iagora.com/%7Eespel/rpm2cpio
=> `rpm2cpio'
Resolving www.iagora.com... done.
Connecting to www.iagora.com[212.100.224.114]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3,114 [text/plain]
100%[=================================================================>] 3,114 56.32K/s ETA 00:00
21:06:57 (56.32 KB/s) - `rpm2cpio' saved [3114/3114]
mcbride4prison@nynaeve:~$ chmod +x rpm2cpio
mcbride4prison@nynaeve:~$ ./rpm2cpio linux-2.4.13-21S.src.rpm >sco.cpio
CPIO archive found!
mcbride4prison@nynaeve:~$ cpio -i --file sco.cpio
54674 blocks
mcbride4prison@nynaeve:~$ wget http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.13.tar.bz2.sign
--21:11:23-- http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.13.tar.bz2.sign
=> `linux-2.4.13.tar.bz2.sign'
Resolving www.kernel.org... done.
Connecting to www.kernel.org[204.152.189.116]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 248 [application/pgp-signature]
100%[=================================================================>] 248 242.19K/s ETA 00:00
21:11:23 (242.19 KB/s) - `linux-2.4.13.tar.bz2.sign' saved [248/248]
mcbride4prison@nynaeve:~$ gpg --keyserver wwwkeys.pgp.net --recv-keys 0x517D0F0E
gpg: /home/mcbride4prison/.gnupg: directory created
gpg: new configuration file `/home/mcbride4prison/.gnupg/gpg.conf' created
gpg: keyring `/home/mcbride4prison/.gnupg/secring.gpg' created
gpg: keyring `/home/mcbride4prison/.gnupg/pubring.gpg' created
gpg: key 517D0F0E: removed multiple subkey binding
gpg: /home/mcbride4prison/.gnupg/trustdb.gpg: trustdb created
gpg: key 517D0F0E: public key "Linux Kernel Archives Verification Key< ftpadmin@kernel.org>" imported
gpg: Total number processed: 1
gpg: imported: 1
mcbride4prison@nynaeve:~$ gpg --verify linux-2.4.13.tar.bz2.sign linux-2.4.13.tar.bz2
gpg: Signature made Wed Oct 24 07:32:44 2001 CEST using DSA key ID 517D0F0E
gpg: Good signature from "Linux Kernel Archives Verification Key <ftpadmin@kernel.org>"
gpg: checking the trustdb
gpg: no ultimately trusted keys found
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: C75D C40A 11D7 AF88 9981 ED5B C86B A06A 517D 0F0E
And there you have it, the kernel from SCO is the same official one that's available at kernel.org
Feel free to use this if someone ever questions whether or not SCO is still distributing the GPL'ed kernel!
------------------------------------------------------------
The text of this Yahoo Message Board post has been licensed for
copying and distribution by the Yahoo Message Board user
"mcbride4prison" under the following license:
License: CC Attribution-NonCommercial-ShareAlike v2.0
------------------------------------------------------------