Installation
This chapter explains how to install the RPM distribution. For those who want to install from source, please read the spec file to get an idea where to copy all the files.
 | Please note than '$RPMDIR' refers to the directory where you downloaded the rpm CVEBrowser files. Also note than the version numbers used on this example will differ with the ones you currently have (example: 0.0.4) |
To install the software you will need to install at least two components: the Mitre CVE file download and importer and the search engine itself; Documentation installation is optional.
Pre - installation steps
You should check the digital signatures of the RPM packages you are about to install. It very simple and that will protect you from trojaned binaries.
Installing and checking the digital signatures
You will need to download the PGP public key in order to validate the digital signature of the RPM.
Download the public GPG key from the cvebrowser site. For example using wget:
bash$ wget http://cvebrowser.sourceforge.net/josevnz.gpg --21:17:01-- http://cvebrowser.sourceforge.net/josevnz.gpg => `josevnz.gpg' Resolving cvebrowser.sourceforge.net... done. Connecting to cvebrowser.sourceforge.net[66.35.250.209]:80... connected. HTTP request sent, awaiting response... 200 OK Length: 1,385 [text/plain] 100%[====================================>] 1,385 1.32M/s ETA 00:00 21:17:02 (1.32 MB/s) - `josevnz.gpg' saved [1385/1385] [josevnz@localhost tmp]$Become root and install the public key on your system.
bash$ su - Password: bash# bash# rpm --import josevnz.gpg bash# rpm -qa gpg-pubkey* gpg-pubkey-1208f5e3-3f80ddf3 gpg-pubkey-f5528e15-3f85f4a8 bash#
Then pick the last key on the list (that should be the new GPG key) and check the information of the key.
bash# rpm -qI gpg-pubkey-f5528e15-3f85f4a8 Name : gpg-pubkey Relocations: (not relocateable) Version : f5528e15 Vendor: (none) Release : 3f85f4a8 Build Date: Thu 09 Oct 2003 07:53:34 PM EDT Install Date: Thu 09 Oct 2003 07:53:34 PM EDT Build Host: localhost Group : Public Keys Source RPM: (none) Size : 0 License: pubkey Signature : (none) Summary : gpg(Jose Vicente Nunez Zuleta (RHCE, SJCD, SJCP)) Description : -----BEGIN PGP PUBLIC KEY BLOCK----- Version: rpm-4.2 (beecrypt-2.2.0) mQGiBD+F9KgRBADRNY+rqIqHJ5wWYwG10xN5NnudrrUASgSqf+blXetVfh0znrkDR3f+vhBf 1xqKL9xTwlpTQn7d+1YQffSb/COfgzoPa1TNxJX3vwrGPsc3zEsUm7KD8UYAhnSAaYSPkLt6 zXG8AdRHIrXA2E9RAs3T72KsenwOpnBRmzMh7GkQxwCg2JSFWbvEcGrTEHTq50+Xqwkff4sD /1uKrxw7zUllT0uL92y/TigezHjO1g2JklCCrgO2AX0ex5hB1m3EPNdqvAdYL7TJKPmeBM22 W8RIXRxdqjuzQrcHRSxMOIfqcnfSJVkNzhitP4rTiQqXXik78+cDrPFhqo9+yxlBZTCtxcp8 JX3JBz4U1pqS9QBPp02KafC8JxfCA/0Rlqq6WUoVJC10HdOCzI6HfUfo+g7zeJFLMtMssOHA muAZaDpCqZYxppIcF0pDZUWHCY4DU7cjmTbHi11ywjC63PsO1KXaEnswDwX3Pp260nPriTCl FCOn6tejdmrhXzibueeZDHBvECXvbp/bRQQ0X4g5pP+8xQutcGiz7Ko0b7RMSm9zZSBWaWNl bnRlIE51bmV6IFp1bGV0YSAoUkhDRSwgU0pDRCwgU0pDUCkgPGpvc2V2bnpAdXNlcnMuc291 cmNlZm9yZ2UubmV0PohZBBMRAgAZBQI/hfSoBAsHAwIDFQIDAxYCAQIeAQIXgAAKCRASrHJU 9VKOFT/8AJ9OfdF+yHdQzZyN1JHZogndpJ8n9gCguvY6u1GTtL7Z/TMgAkBrXqicGxu5AQ0E P4X0qhAEAKw7kycWPk6afMEFYn+LSRC0LLWwiuTwSGIDootmZF526vn/FDIukJ/ptht7zWgT lKni6J/+bFUKnqCrxjzK5/7Fk8jssYJmDuxxdYXNd7cDjP6AguTG/lzwe9blkfIySFD0Cu7d rd8hPccR7UHeDZaF2K3W8ihkR+qH31F9ddjLAAMFA/9FCbp1yK5hqGKhC14rgItA0wEgp45p Qrob1kluYphOYsiWbmaufJiJ/7BluC4cCBMWICEhVPFkcvwy0q8Ns4QcL1aBztu5HmaFpu6W 1Z/LOoT3KrFG5Cw2Y3e76mSy19MKxZboOy0ppM2U8FxrMfZBZnfiO3YNs37MNvWCwJ5R8IhG BBgRAgAGBQI/hfSqAAoJEBKsclT1Uo4V/7UAoK6CNByLAYuFqwfE4+ipmvJ9kKYdAJ9iSpj5 veebvVNx+GZR7a5+ISHuVg== =U1DT -----END PGP PUBLIC KEY BLOCK-----
Check the RPM signatures:
bash# rpm -K $RPMDIR/cvebrowser-tools-1.0-0.noarch.rpm cvebrowser-tools-1.0-0.noarch.rpm: (sha1) dsa sha1 md5 gpg OK bash# rpm -K $RPMDIR/cvebrowser-docs-1.0-0.noarch.rpm cvebrowser-docs-1.0-0.noarch.rpm: (sha1) dsa sha1 md5 gpg OK bash# rpm -K $RPMDIR/cvebrowser-web-1.0-0.noarch.rpm cvebrowser-web-1.0-0.noarch.rpm: (sha1) dsa sha1 md5 gpg OK
You are ready to perform the RPM installation.