diff --git a/docs/guide.md b/docs/guide.md index d90a5f9..f5fba69 100644 --- a/docs/guide.md +++ b/docs/guide.md @@ -288,10 +288,11 @@ GHCup itself is also pre-installed on all platforms, but may use non-standard in GHCup supports verifying the GPG signature of the metadata file. The metadata file then contains SHA256 hashes of all downloads, so this is cryptographically secure. -First, obtain the gpg key: +First, obtain the gpg keys: ```sh -gpg --batch --keyserver keys.openpgp.org --recv-keys 7784930957807690A66EBDBE3786C5262ECB4A3F +gpg --batch --keyserver keys.openpgp.org --recv-keys 7784930957807690A66EBDBE3786C5262ECB4A3F +gpg --batch --keyserver keyserver.ubuntu.com --recv-keys FE5AB6C91FEA597C3B31180B73EDE9E8CFBAEF01 ``` Then verify the gpg key in one of these ways: diff --git a/docs/install.md b/docs/install.md index 753cf11..a9f9b61 100644 --- a/docs/install.md +++ b/docs/install.md @@ -187,7 +187,7 @@ Lower availability of bindists. Stack and HLS binaries are experimental. Download the binary for your platform at [https://downloads.haskell.org/~ghcup/](https://downloads.haskell.org/~ghcup/) and place it into your `PATH` anywhere. -If you want to GPG verify the binaries, import the following key first: `7784930957807690A66EBDBE3786C5262ECB4A3F`. +If you want to GPG verify the binaries, import the following keys first: `7784930957807690A66EBDBE3786C5262ECB4A3F` and `FE5AB6C91FEA597C3B31180B73EDE9E8CFBAEF01`. Then adjust your `PATH` in `~/.bashrc` (or similar, depending on your shell) like so: