From 24163fa0e756d2a1de5cb9609506a80791c467e6 Mon Sep 17 00:00:00 2001 From: Marc Delisle Date: Wed, 19 Aug 2015 11:41:22 -0400 Subject: [PATCH] * Add a quick way to verify the GPG fingerprint * Add keybase.io info about the releasing manager Signed-off-by: Marc Delisle --- doc/setup.rst | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/doc/setup.rst b/doc/setup.rst index 172a41fd76..f08f6afd6f 100644 --- a/doc/setup.rst +++ b/doc/setup.rst @@ -253,9 +253,16 @@ Verifying phpMyAdmin releases +++++++++++++++++++++++++++++ Since July 2015 all phpMyAdmin releases are cryptographically signed by the -releasing developer. You should verify that the signature matches the archive -you have downloaded. This way you can be sure that you are using the same code -that was released. +releasing developer, who is currently Marc Delisle. His key id is +0x81AF644A, his PGP fingerprint is: + +.. code-block:: console + + 436F F188 4B1A 0C3F DCBF 0D79 FEFC 65D1 81AF 644A + +and you can get more identification information from `https://keybase.io/lem9 `_. You should verify that the signature matches +the archive you have downloaded. This way you can be sure that you are using +the same code that was released. Each archive is accompanied with ``.asc`` files which contains the PGP signature for it. Once you have both of them in the same folder, you can verify the signature: