$ sha256sum --ignore-missing --check SHA256SUMS.asc bitcoin-0.16.3-x86_64-linux-gnu.tar.gz: OK sha256sum: WARNING: 20 lines are improperly formatted
在上述命令生成的输出中,必须确保输出内容中包含“OK”。
通过运行以下命令拉取发布签名密钥的副本:
1 2 3 4 5 6 7
$ gpg --recv-keys 01EA5486DE18A882D4C2684590C8019E36C2E964 gpg: requesting key 36C2E964 from hkp server keys.gnupg.net gpg: /home/lishude/.gnupg/trustdb.gpg: trustdb created gpg: key 36C2E964: public key "Wladimir J. van der Laan (Bitcoin Core binary release signing key) <laanwj@gmail.com>" imported gpg: no ultimately trusted keys found gpg: Total number processed: 1 gpg: imported: 1 (RSA: 1)
laanwj 是当前 BitcoinCore 的维护者和版本发布者,上面命令就是导入他的公钥。
然后就可以验证校验和文件是否签名正确:
1 2 3 4 5 6
$ gpg --verify SHA256SUMS.asc gpg: Signature made Wed 19 Sep 2018 04:23:24 AM CST using RSA key ID 36C2E964 gpg: Good signature from "Wladimir J. van der Laan (Bitcoin Core binary release signing key) <laanwj@gmail.com>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 01EA 5486 DE18 A882 D4C2 6845 90C8 019E 36C2 E964
$ bitcoin-cli --version Bitcoin Core RPC client version v0.16.3 $ bitcoind --version Bitcoin Core Daemon version v0.16.3 Copyright (C) 2009-2018 The Bitcoin Core developers
Please contribute if you find Bitcoin Core useful. Visit <https://bitcoincore.org> for further information about the software. The source code is available from <https://github.com/bitcoin/bitcoin>.
This is experimental software. Distributed under the MIT software license, see the accompanying file COPYING or <https://opensource.org/licenses/MIT>
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit <https://www.openssl.org> and cryptographic software written by Eric Young and UPnP software written by Thomas Bernard.