-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HOWTO: Build GnuPG on OS X by Gordon Worley updated by Alexander Nouak Version 4.22 (22 December 2012) Introduction: This document describes how to build GnuPG on Mac OS X 10.2+. The process is exactly the same as for any Unix system, but this howto is something of a tradition (and you never know when Darwin might get crazy again). Please keep in mind that you need to have XCode or Developer Tools respectivly as well as the BSD Subsystem installed For the latest version of this document, check the Mac GPG Website . How To: Begin by downloading and verifying the GnuPG archives from . Here's what to type: curl -O ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.13.tar.gz curl -O ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.13.tar.gz.sig If this server does not work please take a look at the mirrors page of GnuPG at http://www.gnupg.org/(en)/download/mirrors.html, choose a mirror and replace the URL in an appropriate way. For instance choose curl -O ftp://ftp.franken.de/pub/crypt/mirror/ftp.gnupg.org/gcrypt/gnupg/ gnupg-1.4.13.tar.gz To verify: gpg --verify gnupg-1.4.13.tar.gz.sig or, if you don't have an older copy of GnuPG or another OpenPGP program (NEVER verify the version of GnuPG you download with itself), use the SHA-1 checksums found on the GnuPG Web site and compare with the checksum from: openssl sha1 gnupg-1.4.13.tar.gz The checksum for this version should be: 9f2696f3b61cb771053db599e884952c80d2a6e7 Next, untar GnuPG: tar -xzf gnupg-1.4.13.tar.gz And move into the GnuPG directory: cd gnupg-1.4.13 Please bear in mind that the TIGER hash algorithm is no longer supported. If you need to use the TIGER module refer to an earlier version of GnuPG (1.2.6 or older). TIGER is not more part of the OpenPGP standard. If you need to include or exclude anything else please run the following command to get a list of all options available: ./configure -h Now you need to set up GnuPG to build on your system. You do this by running configure: ./configure NOTE: If you try to compile gnupg on Snow Leopard (Mac OS X 10.6) or later you may want to compile a version that runs in 32bit mode as well as in 64bit mode. Thus you will have to compile it for that mode. You can do this by using this command instead to the above mentioned: ./configure CFLAGS="-arch x86_64 -arch i386" --disable-dependency-tracking --disable-asm Once you have everything configured, it's time to compile GnuPG by running: make (Tip for Power Users: To help make run even faster, use the -jn option to overlap processes that make spawns where n is the number of processors on your system plus one. For example, on a single processor eMac, you'd use 'make -j2'.) Optionally, you can run make check before you install to make sure that your system will be safe to run GnuPG on. make check If all tests pass, the only thing left to do is type: sudo make install And, voila! GnuPG should be installed on your computer! After you have GnuPG installed, it wouldn't hurt to check the quality of the random numbers being produced by /dev/random. To test this, first type: gpg --gen-random 0 > rnd & and after a little while kill the process (once you've got 20 or 30 MB of random numbers). Then, using a program like ent, check the quality of the numbers. Of particular interest will be the entropy, compressibility, and chi^2 p-value (this should be as high as possible, as low as possible, and as close to .5 as possible, respectively; see ent documentation for more details). Contact: Questions, bug reports, etc. about this document can be sent to Alexander Nouak at . Thanks: While a patch is no longer necessary, thank you to the following people for providing help with patches when they were necessary: A big thank you to Sebastian Hagedorn and Bryan Blackburn , who figured out what was wrong with configure and provided fixes with 1.0.5/6. Thank you to Jeremy Cooper who did the asm patch. More thanks to Laurie Brown , who came up with the secmem patch. And, of course, many thanks to Gordon Worley who started the project on porting GnuPG for the Mac and to David Shaw and the rest of the GnuPG Team for helping make GnuPG and Darwin get along. For those of you who have been with us a while, you know how easy it is today compared to a few years ago. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (Darwin) iEYEARECAAYFAlDXK+EACgkQ0HWns9BC0+tGHACfRcBabLLb98dO33W5grzL4lL1 zNEAn19Ubz94fznuLprOmabynC5LklaF =7djm -----END PGP SIGNATURE-----