# AUTHOR , YEAR. # msgid "" msgstr "" "Project-Id-Version: Fedora Deployment Guide\n" "POT-Creation-Date: 2011-02-22T00:51:00\n" "PO-Revision-Date: 2011-08-21 08:46+0000\n" "Last-Translator: Automatically generated\n" "Language-Team: Japanese (Japan) \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Language: ja_JP\n" "Plural-Forms: nplurals=1; plural=0\n" #. Tag: title #, no-c-format msgid "Checking a Package's Signature" msgstr "" #. Tag: indexterm #, no-c-format msgid "RPM md5sum" msgstr "" #. Tag: para #, no-c-format msgid "" "If you wish to verify that a package has not been corrupted or tampered " "with, examine only the md5sum by typing the following command at a shell " "prompt (where <rpm_file> is the file name " "of the RPM package):" msgstr "" #. Tag: screen #, no-c-format msgid "" "\n" "rpm -K --nosignature <rpm_file>\n" " \n" " " msgstr "" #. Tag: para #, no-c-format msgid "" "The message <rpm_file>: rsa" " sha1 (md5) pgp md5 OK (specifically the " "OK part of it) is displayed. This brief message means " "that the file was not corrupted during download. To see a more verbose " "message, replace with in the " "command." msgstr "" #. Tag: para #, no-c-format msgid "" "On the other hand, how trustworthy is the developer who created the package?" " If the package is signed with the developer's GnuPG " "key, you know that the developer really is who they " "say they are." msgstr "" #. Tag: indexterm #, no-c-format msgid "RPM GnuPG" msgstr "" #. Tag: indexterm #, no-c-format msgid "" "RPM checking package signatures" msgstr "" #. Tag: indexterm #, no-c-format msgid "" "GnuPG checking RPM package " "signatures" msgstr "" #. Tag: para #, no-c-format msgid "" "An RPM package can be signed using Gnu Privacy Guard " "(or GnuPG), to help you make certain your downloaded package is trustworthy." msgstr "" #. Tag: para #, no-c-format msgid "" "GnuPG is a tool for secure communication; it is a complete and free " "replacement for the encryption technology of PGP, an electronic privacy " "program. With GnuPG, you can authenticate the validity of documents and " "encrypt/decrypt data to and from other recipients. GnuPG is capable of " "decrypting and verifying PGP 5.x files as well." msgstr "" #. Tag: para #, no-c-format msgid "" "During installation, GnuPG is installed by default. That way you can " "immediately start using GnuPG to verify any packages that you receive from " "Red Hat. Before doing so, you must first import Red Hat's public key." msgstr "" #. Tag: title #, no-c-format msgid "Importing Keys" msgstr "" #. Tag: para #, no-c-format msgid "" "To verify Red Hat packages, you must import the Red Hat GPG key. To do so, " "execute the following command at a shell prompt:" msgstr "" #. Tag: screen #, no-c-format msgid "" "\n" "rpm --import /usr/share/rhn/RPM-GPG-KEY\n" " " msgstr "" #. Tag: para #, no-c-format msgid "" "To display a list of all keys installed for RPM verification, execute the " "command:" msgstr "" #. Tag: screen #, no-c-format msgid "" "\n" "rpm -qa gpg-pubkey*\n" " " msgstr "" #. Tag: para #, no-c-format msgid "For the Red Hat key, the output includes:" msgstr "" #. Tag: screen #, no-c-format msgid "gpg-pubkey-db42a60e-37ea5438" msgstr "" #. Tag: para #, no-c-format msgid "" "To display details about a specific key, use rpm -qi " "followed by the output from the previous command:" msgstr "" #. Tag: screen #, no-c-format msgid "" "\n" "rpm -qi gpg-pubkey-db42a60e-37ea5438\n" " " msgstr "" #. Tag: title #, no-c-format msgid "Verifying Signature of Packages" msgstr "" #. Tag: para #, no-c-format msgid "" "To check the GnuPG signature of an RPM file after importing the builder's " "GnuPG key, use the following command (replace <rpm-" "file> with the filename of the RPM package):" msgstr "" #. Tag: screen #, no-c-format msgid "" "\n" "rpm -K <rpm-file>\n" " \n" " " msgstr "" #. Tag: para #, no-c-format msgid "" "If all goes well, the following message is displayed: md5 " "gpg OK. This means that the signature of the package has " "been verified, that it is not corrupt, and therefore is safe to install and " "use." msgstr ""