You have downloaded a file named file.tgz along with a signature file named file.tgz.asc. Which command can be used to verify that file.tgz hat not beeing tampered with since the file creator created the signature?
Assume that you have already retrieved the public key of the file creator
(Select 3 correct answers)
A.
gpg verify file.tgz.asc file.tgz
B.
gpg verify file.tgz
C.
gpg verify file.tgz.asc
D.
gpgv verify file.tgz.asc
E.
gpgv file.tgz.asc
The lack of dashes and mangled spaces make the answers to this question quite hard to read…
They should be:
A.
gpg –verify file.tgz.asc file.tgz
B.
gpg –verify file.tgz
C.
gpg –verify file.tgz.asc
D.
gpg -v –verify file.tgz.asc
E.
gpg -v file.tgz.asc
…and in my previous comment read “dash dash verify” since two dashes are automatically changed into a en dash in comments :(…
gpg –verify
gpgv
Certainly double hyphens are removed automatically to single.