Le lun 26/04/2004 à 10:45, Michael A. Peters a écrit : > On Mon, 2004-04-26 at 01:29, Richard Hally wrote: > But me - I get the MD5SUM from the official fedora server - and then the > ISO's from whatever fast mirror is close. Since I can't currently get > the MD5SUM from the Fedora official server - I don't trust the content > of that mirror. It could be anything. > $ gpg --verify MD5SUM gpg: Signature made Thu Apr 22 20:47:53 2004 CEST using DSA key ID 4F2A6FD2 gpg: Good signature from "Fedora Project <fedora@xxxxxxxxxx>" $ md5sum --check MD5SUM FC2-test3-i386-disc1.iso: OK FC2-test3-i386-disc2.iso: OK ... It could be anything from RedHat ;-)