Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How do I verify the integrity of ClamAV sources?

April 26, 2017clamav integrity sources verify

0

Posted

How do I verify the integrity of ClamAV sources?

1 Answer

0

Posted

• Using GnuPG you can easily verify the authenticity of your stable release downloads by using the following method: Download Tomasz Kojm’s key from the clamav.net site. Import the key into your local public keyring: $ gpg –import tkojm.gpg. Download the stable release AND the corresponding .sig file to the same directory. Verify that the stable release download is signed with Tomasz Kojm’s key: $ gpg –verify clamav-X.XX.tar.gz.sig . Please note that the resulting output MUST contain the following!! Good signature from Tomasz Kojm.