diff --git a/checksums.txt b/checksums.txt index 597663f6..f5403b05 100644 --- a/checksums.txt +++ b/checksums.txt @@ -1,3 +1,8 @@ +16.04.6.2 ISO image +md5sum 788d4a659484c3f87085d1487c5040db +sha1sum 53ebc519e76eb9cd34be298039ecdd5e77c9c9fd +sha256sum ad7f4342e40285ed50e813b0e2f7c23ff69e950646bd1467c2e9d34fadfde978 + 16.04.6.1 ISO image md5sum ca835cef92c2c0daafa16e789c343d1d sha1sum a0035c140ae3b017180e249a65ff4dac2d4981a1 diff --git a/sigs/securityonion-16.04.6.2.iso.sig b/sigs/securityonion-16.04.6.2.iso.sig new file mode 100644 index 00000000..7650e724 Binary files /dev/null and b/sigs/securityonion-16.04.6.2.iso.sig differ diff --git a/testing/Verify_ISO_16.04.6.2.md b/testing/Verify_ISO_16.04.6.2.md new file mode 100644 index 00000000..d8b0500c --- /dev/null +++ b/testing/Verify_ISO_16.04.6.2.md @@ -0,0 +1,51 @@ +### 16.04.6.2 ISO image built on 2019/08/26 + +### Download and Verify + +16.04.6.2 ISO image: +https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.6.2_20190826/securityonion-16.04.6.2.iso + +Signature for ISO image: +https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.6.2.iso.sig + +Signing key: +https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS + +For example, here are the steps you can use on most Linux distributions to download and verify our Security Onion ISO image. + +Download the signing key: +``` +wget https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS +``` + +Import the signing key: +``` +gpg --import KEYS +``` + +Download the signature file for the ISO: +``` +wget https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.6.2.iso.sig +``` + +Download the ISO image: +``` +wget https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.6.2_20190826/securityonion-16.04.6.2.iso +``` + +Verify the downloaded ISO image using the signature file: +``` +gpg --verify securityonion-16.04.6.2.iso.sig securityonion-16.04.6.2.iso +``` + +The output should show "Good signature" and the Primary key fingerprint should match what's shown below: +``` +gpg: Signature made Mon 26 Aug 2019 04:29:53 PM EDT using RSA key ID ED6CF680 +gpg: Good signature from "Doug Burks " +gpg: WARNING: This key is not certified with a trusted signature! +gpg: There is no indication that the signature belongs to the owner. +Primary key fingerprint: BD56 2813 E345 A068 5FBB 91D3 788F 62F8 ED6C F680 +``` + +Once you've verified the ISO image, you're ready to proceed to our Installation guide: +https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation