GnuPG packages in a TeX Live repository
This repository and its contained programs are not part of
TeX Live, nor are they affiliated with the TeX Users Group (TUG)
or any other TeX user group.
To ease adoption of verification, this repository provides a TeX Live
package tlgpg that ships GnuPG binaries for Windows and MacOS
(universal and x86_64). It is hosted as part of
Starting with the TeX Live 2016 release, TeX Live provides facilities to
verify authenticity of the TeX Live database using cryptographic
signatures. For this to work, a working GnuPG program needs to be
available; either gpg (version 1) or gpg2 (version 2).
If you are not running Windows or MacOS, there is no
need to read this page and/or to install tlgpg. Please install
GnuPG over the usual channels of your distribution.
For Windows or MacOS users, there are two options: (i) do a one-time
installation of the tlgpg package; or (ii) add the tlgpg
repository to the list of local repositories and install gpg for the
sake of possible future updates.
This is the simplest case and allows you to install necessary packages:
tlmgr --repository http://www.preining.info/tlgpg/ install tlgpg
Or add tlgpg as repository
tlmgr can handle several repositories at the same time,
and this guarantees that future updates to a package installed from
a secondary repository are also installed.
There are three steps involved:
- Tell tlmgr about the new repository:
tlmgr repository add http://www.preining.info/tlgpg/ mytlgpg
That final word mytlgpg is a free-form tag (one word) that will be
used later. It can be anything reasonable.
- Tell tlmgr that you want to install tlgpg from this repository
(the "quotes" are to protect against possible shell expansion):
tlmgr pinning add mytlgpg "tlgpg*"
- Install the tlgpg package:
tlmgr install tlgpg
You should then see a message that tlgpg has been installed.
How to check verification status?
tlmgr will report the currently used repository at the beginning
of each run. After this there is either
from which you can tell whether the repository was checked against a
The sources of the programs are available here.
Please send them to me by email.
(C) 2016-2019 Norbert Preining