Table of Contents
Advertisement
Configuration
4.8
Verifying Updates Authenticity with GnuPG
GnuPG is a free alternative to the encryption program PGP (Pretty Good Privacy).
Using GnuPG you can verify the authenticity of the AntiVir Updates.
It is highly recommended to use GnuPG.
However, this procedure requires intensive knowledge of Unix and GnuPG. In case of
configuration errors, there is the danger to deactivate AntiVir updates.
You can find more details about GnuPG at
The following steps guide you to activate GnuPG support.
Download GnuPG from the Website http://www.gnupg.org. Here you can also
find the manual with further information about GnuPG and its features.
Generate your own PGP key pair, as described in the documentation.
Import the AntiVir public PGP key into your key-ring:
Display the fingerprint of the key, to check if it really is the AntiVir PGP key:
Check if the fingerprint corresponds with the one on AntiVir Website
www.avira.com).
Sign the AntiVir public key, in order to certify its validity:
Change to /bin subdirectory of the AntiVir installation directory:
Check the signature with
Activate GnuPG for AntiVir. In /etc/avupdater.conf enter the path to GnuPG
binaries, using the option GnuPGBinary :
You can edit this option in avupdater.conf only manually. Setting in the configuration
script is not possible, in order to avoid the danger of configuration errors.
Avira GmbH
gpg --import antivir.gpg
gpg --fingerprint build@avira.com
The 40-character fingerprint is displayed.
gpg --sign-key build@avira.com
cd /tmp/antivir-webgate-prof-<version>/bin
Here you can find the files antivir and antivir.sig .
gpg --verify antivir.asc antivir
If you do not get any error message, you can use GnuPG for AntiVir updates.
GnuPGBinary
AntiVir WebGate
http://www.gnupg.org
/usr/local/bin/gpg
(http://
49
Advertisement
Table of Contents
