diff --git a/doc/README.md b/doc/README.md --- a/doc/README.md +++ b/doc/README.md @@ -7,6 +7,26 @@ To download Bitcoin ABC, visit [bitcoinabc.org](https://download.bitcoinabc.org/). +Verify +--------------------- + +If you download the associated signature files with the binaries from the above link, +you can verify the integrity of the binaries by following these instructions, replacing +VERSION with the value relevant to you: + +``` +VERSION="0.20.9" +wget -q -O - https://download.bitcoinabc.org/keys.txt | while read FINGERPRINT _; do gpg --recv-keys "${FINGERPRINT}"; done +FILE_PATTERN="./*-sha256sums.${VERSION}.asc" +gpg --verify-files ${FILE_PATTERN} +grep "bitcoin-abc-${VERSION}" ${FILE_PATTERN} | cut -d " " -f 2- | ls | xargs -i grep "{}" ${FILE_PATTERN} | sha256sum -c +``` + +*IMPORTANT NOTE:* The first time you run this, all of the signing keys will be UNTRUSTED and you will see warnings +indicating this. For best security practices, you should `gpg --sign-key ` for each release signer key +and rerun the above script (there should be no warnings the second time). If the keys change unexpectedly, +the presence of those warnings should be heeded with extreme caution. + Running --------------------- The following are some helpful notes on how to run Bitcoin ABC on your native platform.