Author Topic: How to Verify Litecoin GPG Signatures on Windows  (Read 35839 times)

Offline lavajumper

  • Jr. Member
  • **
  • Posts: 27
How to Verify Litecoin GPG Signatures on Windows
« on: July 19, 2013, 12:52:22 AM »
Here's a quick guide on verifying GPG signatures for Litecoin in Windows. This will allow you to verify GPG signatures in Windows for your own personal use.
It has been tested on XP,sp3 and Win7, Win7_64, Win8_64, YMMV.

**We need this tested on Vista!  If you run this platform, please provide feedback

Russian translation: see first response below.

First, the 10,000 foot level:
  • Download the program gpg4win.
  • Install gpg4win
  • Create a certificate for yourself
  • Set up the key directory server
  • Search/Import LiteCoinDev's certificate
  • Certify LiteCoinDev's certificate via your cert and LiteCoinDev's fingerprint.
  • Verify Litecoin.exe.
  • Install Litecoin
*Please read the notes at the end of this post*

Step-by-Step

Download gpg4win:
http://www.gpg4win.org/download.html
Get the full version, its the first link.

Run the installer.
Choose where you want it. When you get to this screen, check the box and move on.




Create a certificate for yourself:
Start Kleopatra.
Now, generate a new certificate for yourself.







Click on 'Advanced Settings'

Make it usable for Signing, Encryption, Authentication.
I generally make a self cert, that is not going 'into the wild' usable for a long time.



It will ask for a password. Give it one. Make it good, but NEVER lose it.



Click 'Finish'




Set up the Directory Service:
Now, go to Settings| Configure Kleopatra
Click 'New' to set up a directory server.
Scheme is 'hkp', Server name is 'pgp.mit.edu', port 11371



Search/Import LiteCoinDev's certificate
Click 'Ok' and then 'Lookup Certificates on Server'
Search for '0xC37E4723969276F5'

If you are running a Mac, the builds are signed separately by the Mac developer:
http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x657EB016521670C0
This is because the Dev Team can't do deterministic builds like Linux and Win32.


Select 'Litecoin Dev Team' and 'Import'




Certify LiteCoinDev's certificate via your cert and LiteCoinDev's fingerprint.
Click on the Others tab
Select and right click on Litecoin Dev Team's certificate and chose 'Certify Certificate'



Certify the new ID, making sure the fingerprint is as below:
DC38 0DA4 3082 F163 78C9  7414 C37E 4723 9692 76F5



If the fingerprint does NOT match...STOP! Bad things are happening. Otherwise,

Select the certificate you created above:




Verify Litecoin.exe
Go to File|Decrypt/verify, then select the exe or the corresponding signature



Click 'Decrypt/Verify'




Success!



If it fails, STOP. Bad things are happening. Do NOT install that program! Otherwise,

Install Litecoin:
Run the Litecoin installer and smile, while enjoying your sense of accomplishment.


NOTES:
gpg4win seems to 'hang' when its accessing the file system. I found being patient pays off (way too patient for my taste, but that's what works ).

Thank you rmbell for win7_64 testing and getting the ball rolling!
Thank you General-Beck for Win8_64 testing and Russian translations.( See link below )


« Last Edit: August 01, 2013, 01:57:36 AM by lavajumper »

Offline General-Beck

  • Litecoin Association Member
  • Jr. Member
  • ***
  • Posts: 165
  • LTC p2pool node
    • LTC p2pool
« Last Edit: July 24, 2013, 11:29:06 AM by General-Beck »

Offline lavajumper

  • Jr. Member
  • **
  • Posts: 27
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #2 on: July 24, 2013, 03:15:08 PM »
The more the merrier! Thanks for the test and the translation! Definitely a great thing to do.
Props!


Offline chriswilmer

  • Jr. Member
  • **
  • Posts: 24
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #3 on: July 29, 2013, 10:55:51 PM »
Just wanted to say thanks for doing this!

Offline Smoothie

  • VIP Donator
  • Sr. Member
  • ****
  • Posts: 1042
  • ► ► ► WWW.LEALANA.COM ► ► ►
    • LEALANA UNFUNDED PHYSICAL LITECOINS
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #4 on: July 30, 2013, 08:20:56 AM »
I encourage anyone who buys coins from me to verify my PGP signature as well before sending LTC to a payment address.  :)

Offline dalewb

  • Jr. Member
  • **
  • Posts: 49
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #5 on: December 15, 2013, 10:17:14 PM »
Thanks so much for posting this!!  I went to install the new litecoin client and when I heard it needed to be verified with some strange program I was like "crap!"  I began reading the instructions - go download this program, that program, follow these instructions and was like "this is never going to make sense, nor do I have the time...."

Thanks for helping one busy guy get the ball rolling :D

Offline Cobra99

  • Newbie
  • *
  • Posts: 2
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #6 on: December 16, 2013, 05:30:19 PM »
There is no possibility to check "Root certificate defined or skip configuration" in my installer at first step.
I have new litecoin-0.8.6.1-win32-setup.exe file from litecoin.org/upgrade
At last step I choose that .exe file, than click on 'Decrypt/Verify' and this appers

 :-[

Offline liteminer24

  • Newbie
  • *
  • Posts: 12
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #7 on: December 17, 2013, 01:37:47 AM »
@Cobra99 you need to download the ->padlock<- 'GPG signature' link from https://litecoin.org/ (right click - save linked content ass) and then -> Go to File|Decrypt/verify, then select THIS FILE (XX.exe.asc).

Offline Cobra99

  • Newbie
  • *
  • Posts: 2
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #8 on: December 17, 2013, 04:49:40 PM »
Thanks, I got it

Offline Garrison

  • Newbie
  • *
  • Posts: 3
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #9 on: December 17, 2013, 08:10:13 PM »
I ran into the same problem as Cobra99, but I'm unable to download the .asc file from the litecoin website. When I "save link as" it just saves a .html file of the website. Any advice on where to get that unusual second file that goes along with the .exe file?

Offline Cryptosaurus

  • Jr. Member
  • **
  • Posts: 37
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #10 on: December 18, 2013, 01:39:20 PM »
I ran into the same problem as Cobra99, but I'm unable to download the .asc file from the litecoin website. When I "save link as" it just saves a .html file of the website. Any advice on where to get that unusual second file that goes along with the .exe file?

Which browser are you using? If Chrome/Firefox, try Explorer that should do the trick.

Now I'm facing a problem a couple steps earlier than Cobra99. When entering  '0xC37E4723969276F5' @ 'Lookup Certificates on Server' nothing happened. At first I did get a notification which explained that I'm looking for registry key etc.. (can't get it back for a print screen).

But at this print screen you see what happens now.


As you can see the program doesn't search and there is nothing to import.

Offline Garrison

  • Newbie
  • *
  • Posts: 3
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #11 on: December 18, 2013, 04:38:41 PM »


Which browser are you using? If Chrome/Firefox, try Explorer that should do the trick.

[/quote]

As much as it pains me to allow Internet Explorer back onto my computer, I will try this, thanks  ;D

Offline Cryptosaurus

  • Jr. Member
  • **
  • Posts: 37
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #12 on: December 18, 2013, 05:42:37 PM »
Never mind my problem!! Fixed it.

Offline Garrison

  • Newbie
  • *
  • Posts: 3
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #13 on: December 18, 2013, 08:29:26 PM »
Downloading the GPG signature through internet explorer worked! Thanks for the suggestion!

Offline Cryptosaurus

  • Jr. Member
  • **
  • Posts: 37
Re: How to Verify Litecoin GPG Signatures on Windows
« Reply #14 on: December 19, 2013, 08:52:42 AM »
Downloading the GPG signature through internet explorer worked! Thanks for the suggestion!

Your'e welcome.