how can I use the file suricata-xxx.tar.gz.sig ? I download it but can’t extract it.
This is the signature for the release file. You don’t have to extract it, it’s a way to make sure the release you downloaded is not modified.
If you want the release you need the file without the .sig file extension