I just downloaded
gpg4win onto Windows 8.
I wanted to check the integrity, and apparently you can do so with
certutil. So I navigated to my downloads folder and typed:
C:\Users\xxx\Downloads> certutil -hashfile gpg4win-3.0.2.exe sha1 SHA1 hash of file gpg4win-3.0.2.exe: a2 da ba f0 a6 5f 3e f3 0c 60 e7 52 2f 34 59 c8 11 20 09 8e CertUtil: -hashfile command completed successfully.
But, when I go to https://www.gpg4win.org/package-integrity.html, they display a bunch of text and even the line:
Doesn't agree with what
certutil spat out. So my question is:
- Have I even used
certutilcorrectly?, meaning the sha1 truly doesn't check out... and I should re-download the file from somewhere else, or
- Have I mis-used
certutil/ completely misunderstood the integrity checking process?