verify download
while going through the verify procedures as described
http://www.debian.org/CD/verify
For newer releases, newer and cryptographically stronger checksum
algorithms (SHA1, SHA256 and SHA512) are used, and there are
equivalent tools available to work with these.
paper@Dhost:~/Downloads$ sha1sum debian-7.1.0-amd64-netinst.iso
c8fe5de7d4ee9ca5238e660bd6fcfe7dd572c094 debian-7.1.0-amd64-netinst.iso
-------------------------------------------------------------------------
paper@Dhost:~/Downloads$ sha256sum debian-7.1.0-amd64-netinst.iso
62232b8adc281c04f9985e4a1541481a468b3b2ca1702a0dd7f62fcf56ef101b
debian-7.1.0-amd64-netinst.iso
---------------------------------------------------------------------------------------------------
paper@Dhost:~/Downloads$ sha512sum debian-7.1.0-amd64-netinst.iso
b25aea6a759ff8bb415bb66ee9a2dc7b9db272770b238e3ab8bbba54ac1a380b5efeed20114b682ba32f176a028457f3df1b276e0229537af1a97eeb122f357c
debian-7.1.0-amd64-netinst.iso
-------------------------------------------------------------------------
To ensure that the checksums files themselves are correct, use GnuPG
to verify them against the accompanying signature files (e.g.
MD5SSUMS.sign)
The keys used for these signatures are all in the Debian GPG keyring
and the best way to check them is to use that keyring to validate via
the web of trust. To make life easier for users, here are the
fingerprints for the keys that have been used for releases in recent
years (with some UIDs removed for clarity):
clicking on the link in that paragraph and going to
http://keyring.debian.org/
The server may be accessed with gpg by using the --keyserver option in
combination with either of the --recv-keys or --send-keys actions.
looking at man gpg
there are no options and all commands.
which command or combo of commands should be used.
do i need to set up a key while using an insecure machine.
i have been swimming through this jungle of confusion for a few years
and am slowly coming to understand its actual structure. while i do
work a graveyard shift am in fatigue 24 hours trying to learn the
debian way is difficult at times. i have studied C and Bash and many
other languages. but the the instructions here and there can be
frusterating.
thank you, in advance, for the help
Reply to: