4. OpenBSD Signify Signatures on Configuration/Database Files

--with-signify=PATH

Use signify (signify-openbsd on Debian flavour Linuxes) to verify database/configuration file. The public key of the effective user, usually root, (in ~/.signify/install_name.pub) will be used (where install_name is the name under which samhain is installed).

--with-checksum=CHECKSUM

Compile in TIGER192 checksum of the signify binary. CHECKSUM can be determined either using samhain -H or gpg --load-extension tiger --print-md TIGER192

--with-pubkey-checksum=CHECKSUM

Compile in TIGER192 checksum of the ~/.signify/install_name.pub public key used to verify the signature of signed database/configuration files. CHECKSUM can be determined either using samhain -H or gpg --load-extension tiger --print-md TIGER192