At least on Fedora try to verify signature inside dsc file, which provides full release verification. Use dscverify tool to parse the file and ensure the signature is valid.
3 lines
317 B
Plaintext
3 lines
317 B
Plaintext
SHA512 (whois_5.5.15.tar.xz) = e173927fd3428d27bc8ab34b1a66b82d6a2cfc107245755868bdd33cb7eb1b8159e87774c3a751d9694e65b3d870b9904dc9a3c657dca385950c8a19be1fa61c
|
|
SHA512 (whois_5.5.15.dsc) = 74511abff1e5becbf47937308390067682cc1b2d72309f40ebb7e2c534b3a833c814852163df4da49de1cc50e7c80f6b96cf0ba408ef84c1d9ad21ee2c3fdc4b
|