From 0e6f27a4f2e24de55abfaed0f1d0f187e93ba68f Mon Sep 17 00:00:00 2001 From: Nathan Christopher McRae Date: Mon, 24 Nov 2025 12:07:16 -0800 Subject: [PATCH] Add explanation to script template --- verify-script.template | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/verify-script.template b/verify-script.template index 6d3aa78..522f6e9 100644 --- a/verify-script.template +++ b/verify-script.template @@ -1,4 +1,19 @@ #!/bin/env sh +# This script should have come along with two files: +# * The target file '{filename}' +# * The signature file '{filename}.sh.sig' +# (or this file should have been signed in some other way) +# +# First, you should verify that this file came from the person you expect by +# verifying the signature. +# +# Next, you should run this script which will check that the target file +# matches the hash that was calculated when the message below was written. +# This will confirm that the file you have matches the file the message was +# written about. +# +# Alternatively, if you don't want to run this script, you can verify the +# hash manually. MESSAGE="{message}" FILE="{filename}"