Re: How to verify X.509 signatures?

2013-03-24 Thread Peter Lebbing
On 23/03/13 21:06, adrelanos wrote: TrueCrypt.org says [1] they are signing TrueCrypt Setup 7.1a.exe [2] with a X.509 signature. How can I verify such a signature? This is probably a Microsoft Authenticode signature on a Microsoft PE executable. It's very specifically a Microsoft thing, and

Re: How to verify X.509 signatures?

2013-03-24 Thread Markus Reichelt
* adrelanos adrela...@riseup.net wrote: TrueCrypt.org says [1] they are signing TrueCrypt Setup 7.1a.exe [2] with a X.509 signature. How can I verify such a signature? For Windows, they explicitly state how to do that. (On Debian Wheezy.) I tried: gpg2 --verify TrueCrypt Setup 7.1a.exe

Re: How to verify X.509 signatures?

2013-03-24 Thread adrelanos
Markus Reichelt: * adrelanos adrela...@riseup.net wrote: TrueCrypt.org says [1] they are signing TrueCrypt Setup 7.1a.exe [2] with a X.509 signature. How can I verify such a signature? For Windows, they explicitly state how to do that. Yes, that's easily working. (On Debian Wheezy.)

Re: How to verify X.509 signatures?

2013-03-24 Thread adrelanos
Peter Lebbing: On 23/03/13 21:06, adrelanos wrote: TrueCrypt.org says [1] they are signing TrueCrypt Setup 7.1a.exe [2] with a X.509 signature. How can I verify such a signature? This is probably a Microsoft Authenticode signature on a Microsoft PE executable. It's very specifically a

Re: How to verify X.509 signatures?

2013-03-24 Thread Peter Lebbing
On 24/03/13 13:10, adrelanos wrote: I don't care so much about that truecrypt.exe, but want to know how it works in general for any file on Linux. This is because I consider dual signing the files I distribute. If it's about signing rather than verifying, I found this link on the Google hunt I