On Wed, Mar 16, 2011 at 10:54 AM, Steve McIntyre <email@example.com> wrote: > With reference to > http://lists.debian.org/debian-cd/2011/03/msg00071.html, I've written > something up. Thanks for doing this, Steve. It serves my purposes well enough, but I think adding some step-by-step directions for less-technical users would be helpful, too. To that end, I'm attaching a reasonable first pass at those directions in both HAML and HTML formats. Feel free to include them in the new web page if you find them useful, or use them as a starting point for some alternative procedure. You might also look at the Ubuntu Howto at https://help.ubuntu.com/community/HowToMD5SUM. It's obviously Ubuntu-specific, but it's available under a CC license if you think it might offer a better starting point. This issue is important to me, so please let me know if I can help further.
In order to verify the official Squeeze ISO images, you should perform the following steps.
dpkg -l gnupg || sudo aptitude install gnupg
gpg --keyserver keyring.debian.org --recv-keys 6294BE9B
gpg --fingerprint 6294BE9B | fgrep 'DF9B 9C49 EAA9 2984 3258 9D76 DA87 E80D 6294 BE9B'
gpg --keyring /usr/share/keyrings/debian-keyring.gpg -kvv 6294BE9B
gpg --verify MD5SUMS.sign MD5SUMS
gpg --verify SHA1SUMS.sign SHA1SUMS
md5sum --check MD5SUMS 2>&- | egrep 'OK$'
sha1sum --check SHA1SUMS 2>&- | egrep 'OK$'
Description: Binary data