Download
~~~~~~~~

.. comment
    .. begin stable

    Current Stable Version
    ''''''''''''''''''''''

    - `CHANGES file <http://storage.perlig.de/cdbx/CHANGES-0.1.0>`_
    - `cdbx-0.1.0.tar.xz <http://storage.perlig.de/cdbx/cdbx-0.1.0.tar.xz>`_
    - `cdbx-0.1.0.tar.bz2 <http://storage.perlig.de/cdbx/cdbx-0.1.0.tar.bz2>`_
    - `cdbx-0.1.0.tar.gz <http://storage.perlig.de/cdbx/cdbx-0.1.0.tar.gz>`_
    - `cdbx-0.1.0.zip <http://storage.perlig.de/cdbx/cdbx-0.1.0.zip>`_
    - `cdbx-0.1.0.digests <http://storage.perlig.de/cdbx/cdbx-0.1.0.digests>`_

    .. end stable


.. begin dev
.. end dev


Integrity Check
---------------

There are hashes (MD5, SHA1 and SHA256) of the download packages stored
in the `digests file
<http://storage.perlig.de/cdbx/cdbx-0.1.0.digests>`_\.
In order to check the integrity of the downloaded file, use a tool like
md5sum (or sha1sum, sha256sum accordingly), e.g.:

.. sourcecode:: console

    $ md5sum -c cdbx-0.1.0.digests
    cdbx-0.1.0.tar.bz2: OK
    cdbx-0.1.0.tar.gz: OK
    cdbx-0.1.0.tar.xz: OK
    cdbx-0.1.0.zip: OK

In order to check the integrity of the digest file itself, you can check
the PGP signature of that file. The file is signed by André Malo, Key-ID
0x8103A37E:

.. sourcecode:: console

    $ gpg --verify cdbx-0.1.0.digests
    gpg: Signature made Sun Oct 11 14:15:48 2015 CEST using DSA key ID 8103A37E
    gpg: Good signature from "Andre Malo <nd@apache.org>"
    gpg:                 aka "Andr\xe9\x20Malo <nd@perlig.de>"
    gpg:                 aka "Andre Malo <ndparker@gmx.net>"


.. comment
    Vendor Packages
    ---------------

    There's a `Gentoo Linux Ebuild
    <http://storage.perlig.de/cdbx/cdbx-0.1.0.ebuild>`_
    available.


.. vim: ft=rest tw=72
