How to verify downloaded file with .sig file?
问题 When I download GCC, it also has a .sig file, and I think it is provided to verify downloaded file. (I downloaded GCC from here). But I can't figure out how should I use it. I tried gpg , but it complains about public key. [root@localhost src]# gpg --verify gcc-4.7.2.tar.gz.sig gcc-4.7.2.tar.gz gpg: Signature made Thu 20 Sep 2012 07:30:44 PM KST using DSA key ID C3C45C06 gpg: Can't check signature: No public key [root@localhost src]# How can I verify downloaded file with .sig file? 回答1: You