![cpanel download cpanel download](https://www.tecmint.com/wp-content/uploads/2014/01/cPanel-WHM-Dashboard.png)
The system uses development keys to sign internal development builds and builds destined for the mirror system.ĬPanel & WHM systems that track release tiers or Long Term Support tiers only need access to the "release" keys. The system uses release keys to sign all assets intended for the normal mirror system. GPG KeysĬPanel & WHM uses two primary GPG keys to sign assets delivered through our httpupdate mirror system.
![cpanel download cpanel download](http://wiki.r1soft.com/download/attachments/29852138/Control+Panel+Users+window_English.png)
systems, such as the public portion of our GPG keys, via SSL connections. The system validates assets that you download from other cPanel, L.L.C.
![cpanel download cpanel download](https://www.inmotionhosting.com/support/wp-content/uploads/2020/11/backupManagercPanelBackups.jpg)
The system directly validates the assets through separate GnuPG (GPG) signature files.
#Cpanel download verification
The signature verification logic requires that all assets you download from the httpupdate mirror system meet either of the following criteria: This avoids any possibility of corruption due to a compromise of the mirror system or the server’s connection to cPanel, L.L.C. CPanel & WHM versions 11.48 and later include functionality to validate that you download all cPanel & WHM-delivered files in an uncorrupted state.