Enterprise Linux Engineer Study Notes Practice 12: Upgrade software

Model I: samba upgrade
1, looking for the official website of samba to find the fastest mirror server
2, download the latest software packages and digital signature
3, checking the digital signature
# wget http://us1.smaba.org/samba/ftp/smaba_3.0.6.tar.asc download digital signature
public key # wget http://us1.samba.org/samba/ftp/samba-pubkey.asc download file
# gpg - import samba-pubkey.asc import the public key file
# gzip-d samba-3.0.0.tar.gz extract package
# gpg - verify samba-3.0.0.tar.asc check digital signatures
4. Compilers to install upgrade
# tar xvf samba-3.0.0.tar
# cd samba-3.0.6
# cd source
#. / configure
# make
# make install

Original no secret of the digital signature method
1. Fat side A of the original hash operations to get the number of MD Abstract
2. Fat side A with their own private key encryption of the MD, has been digitally signed DS
3. The original and the DS will be sent to the receiver with B
4. A recipient B's public key to decrypt the use of DS to be MD, and the original operator to Hash
5. Will come to the MD calculations and decrypt the value of MD values derived from matching that success.

The original digital signature and confidentiality of the implementation
1. Made on the original hash operations to get the number of MD Abstract
2. Fat side A with their own private key encryption of the MD to be DS
3. Sender IDES symmetric algorithm with symmetric key SK of the original SD, A public key encryption, the encrypted information E
4. Issued debit side A with B's public key encryption symmetric key SK, the formation of the number of envelopes DE
5. A sender will be encrypted information E and DE envelopes sent to the recipient B
6. Receiver B with their own private key to decrypt the envelope DE made SK
7. Receiver B with SK to decrypt the information E, be original, SD, A public key
8. The use of A's public key to decrypt the original SD to be MD
9. Receiver B of the original Hash operation to be carried out MD '
10. Such as the MD and MD 'equivalent to that data has not been tampered with, the real signature.

Model II: In order to Kernel patching
1. 2.4.26 ready paper version of the kernel linux-2.4.26.tar.bz2
2. Download the 2.4.27 version of the patch and patch-2.4.27.bz2 files md5 checksum
3. Patching
# tar xvjf linux-2.4.26.tar.bz2
# bzcat patch-2.4.27.bz2 | patch-p0-p0 refers to the original path
# mv linux-2.4.26 linux-2.4.27
4. To compile a new kernel to replace the old kernel
# cd linux-2.4.27; make menuconfig
# make dep bzImage modules modules_install install