From 28bce0ac703d14465da57d579af90341f90b043c Mon Sep 17 00:00:00 2001
From: filip <filip.komar@gmail.com>
Date: Sun, 15 May 2016 22:23:30 +0200
Subject: adding a gpg test to the DL page

---
 en/downloads/get/index.php | 29 +++++++++++++++++++++++++++--
 1 file changed, 27 insertions(+), 2 deletions(-)

(limited to 'en')

diff --git a/en/downloads/get/index.php b/en/downloads/get/index.php
index 21e9bed86..1e1a286fe 100644
--- a/en/downloads/get/index.php
+++ b/en/downloads/get/index.php
@@ -235,8 +235,33 @@ if (array_key_exists('sha512', $product)) {
 }
 ?>
 </pre>
-                            <p><?php _g('If checksums do not match, <strong>DO NOT use this ISO</strong>. Double-check and try to download again.'); ?></p>
-                            <!-- TODO (rda): add direct download links to checksum and signature files as a backup. -->
+<p><?php _g('If checksums do not match, <strong>DO NOT use this ISO</strong>. Double-check and try to download again.'); ?></p>
+<p><?php _g('You can also verify the signature of an ISO.', null, ' ');
+_g('First you need to import the key from a MIT PGP Public Key Server:'); ?></p>
+<pre class="term">
+$ gpg --keyserver pgp.mit.edu --recv-keys EDCA7A90
+</pre>
+<p><?php _g('In response there should be one of the following lines:'); ?></p>
+<pre class="term">
+gpg: key EDCA7A90: public key "Mageia Release &lt;release&#x40;mageia.org&gt;" imported
+
+<?php _g('or if you already imported the key before:'); echo PHP_EOL; ?>
+
+gpg: key EDCA7A90: "Mageia Release &lt;release&#x40;mageia.org&gt;" not changed
+</pre>
+<p><?php _g('Then you need to verify the signature for the ISO.'); ?></p>
+<pre class="term">
+$ gpg --verify /your/download/location/<?php echo basename($download); ?>.md5.gpg
+</pre>
+<p><?php _g('In response there should be a lines like:'); ?></p>
+<pre class="term">
+gpg: Good signature from "Mageia Release &lt;release&#x40;mageia.org&gt;"
+gpg: WARNING: This key is not certified with a trusted signature!
+gpg:          There is no indication that the signature belongs to the owner.
+Primary key fingerprint: B210 76A0 CBE4 D93D 66A9  D08D 835E 41F4 EDCA 7A90
+</pre>
+<p><?php _g('The warning about uncertified signature is expected.'); ?></p>
+<!-- TODO (rda): add direct download links to checksum and signature files as a backup. -->
                         </div>
                     <?php endif; ?>
                     <p><?php
-- 
cgit v1.2.1