Personal Notes File


Verification of Downloaded Package

Two types of compressed packages are offered for NOTEFILE: One is the notefile.zip file for Windows and the other is the notefile.tgz file for Linux. To check the integrity of the downloaded package, it is strongly advised to download the notefile.asc hash list file and using any appropriate checksum / hash verification program, to verify the checksum of the downloaded package. The hash list file is also signed with my PGP key for extra security. So, there are two steps for validation, with the first step being optional.

Before starting the validation, the above-mentioned notefile.zip or notefile.tgz file and the notefile.asc file should be downloaded and put into a preferably empty folder on your local computer.

Step 1: Validate PGP signature in the asc file (optional)

It is beyond the scope of this help topic to teach you how to install and use PGP or GPG (GnuPG). You can search for “pgp for windows” or “pgp for linux” to learn more. Once you have installed PGP or GPG on your local machine, import my public key using the following command:

gpg --recv 16BC4013DF713A87AEFEAD161F68A52926B3C0BA

Validate the signature in the asc file using the command:

gpg --verify notefile.asc

If the output contains a line like, Good signature from "Fedon Kadifeli … <…@kadifeli.com>" … you are good to go. Warnings may be displayed if you have not yet trusted my public PGP key, but this is normal.

Step 2: Validate the .zip or .tgz file using one of the hashes listed in the asc file

You can validate the checksum of the downloaded notefile.zip or notefile.tgz file against the hashes listed in the asc file. You need a command like md5sum, sha1sum, sha256sum, or sha512sum. You can find them from free on the Internet. Checksum validation is easy. Assuming that the notefile.asc and the notefile.zip and/or notefile.tgz files are in your current directory, run one of these commands as shown in the example below:

md5sum -c notefile.asc

If the output contains a line for the .zip and/or .tgz file you have downloaded ending with OK, for example, notefile.zip: OK (you can safely ignore the warning about improperly formatted lines) you have successfully validated the package you have downloaded. You are now ready to install NOTEFILE on your computer.