AVIRA ANTIVIR UNIX WEBGATE, Руководство пользователя

Страница: 50 / 83

Configuration
Avira GmbH AntiVir WebGate
49
4.8 Verifying Updates Authenticity with GnuPG
GnuPG is a free alternative to the encryption program PGP (Pretty Good Privacy).
Using GnuPG you can verify the authenticity of the AntiVir Updates.
It is highly recommended to use GnuPG.
However, this procedure requires intensive knowledge of Unix and GnuPG. In case of
configuration errors, there is the danger to deactivate AntiVir updates.
You can find more details about GnuPG at http://www.gnupg.org
The following steps guide you to activate GnuPG support.
Download GnuPG from the Website http://www.gnupg.org . Here you can also
find the manual with further information about GnuPG and its features.
Generate your own PGP key pair, as described in the documentation.
Import the AntiVir public PGP key into your key-ring:
gpg --import antivir.gpg
Display the fingerprint of the key, to check if it really is the AntiVir PGP key:
gpg --fingerprint build@avira.com
The 40-character fingerprint is displayed.
Check if the fingerprint corresponds with the one on AntiVir Website ( http://
www.avira.com ).
Sign the AntiVir public key, in order to certify its validity:
gpg --sign-key build@avira.com
Change to /bin subdirectory of the AntiVir installation directory:
cd /tmp/antivir-webgate-prof-<version>/bin
Here you can find the files antivir and antivir.sig .
Check the signature with
gpg --verify antivir.asc antivir
If you do not get any error message, you can use GnuPG for AntiVir updates.
Activate GnuPG for AntiVir. In
/etc/avupdater.conf
enter the path to GnuPG
binaries, using the option
GnuPGBinary
:
GnuPGBinary /usr/local/bin/gpg
You can edit this option in
avupdater.conf
only manually. Setting in the configuration
script is not possible, in order to avoid the danger of configuration errors.