FAQ

How to use GPG to verify signed release?

To perform the verification, you need the following:

• signed file – for example edge-home-orchestration-go-v1.0.0.tar.gz
• signature file – accompanying file with “.asc” extension (Ex. edge-home-orchestration-go-v1.0.0.tar.gz.asc)
• public key – for example public.pgp

Import the public key to your keystore

$ gpg --import <public key>

Verification signed file

$ gpg --verify <signature file> <signed file>