diff --git a/checksums.txt b/checksums.txt index f60c940c..6fbddc41 100644 --- a/checksums.txt +++ b/checksums.txt @@ -1,3 +1,8 @@ +16.04.4.2 ISO image +md5sum b9c3908c1613f0ca92248810ba7c7b66 +sha1sum 4f9758144b27d965e7e7a759a8203aa684508957 +sha256sum 73d5cc3d6f97e7fc7186c7cd07ebb22bae809be1f5167636f93a3f938c4de1e5 + 16.04.4.1 ISO image md5sum 7427c70d65cb625e1d13a1044fe7a805 sha1sum 02702c92dc07a9d2f8f54efc11962e921b2a7f48 diff --git a/sigs/securityonion-16.04.4.2.iso.sig b/sigs/securityonion-16.04.4.2.iso.sig new file mode 100644 index 00000000..96ec604c Binary files /dev/null and b/sigs/securityonion-16.04.4.2.iso.sig differ diff --git a/testing/Verify_ISO_16.04.4.2.md b/testing/Verify_ISO_16.04.4.2.md new file mode 100644 index 00000000..aaacfec8 --- /dev/null +++ b/testing/Verify_ISO_16.04.4.2.md @@ -0,0 +1,51 @@ +### 16.04.4.2 ISO image built on 2018/06/15 + +### Download and Verify + +16.04.4.2 ISO image: +https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.4.2_20180615/securityonion-16.04.4.2.iso + +Signature for ISO image: +https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.4.2.iso.sig + +Signing key: +https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS + +For example, here are the steps you can use on most Linux distributions to download and verify our Security Onion ISO image. + +Download the signing key: +``` +wget https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS +``` + +Import the signing key: +``` +gpg --import KEYS +``` + +Download the signature file for the ISO: +``` +wget https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.4.2.iso.sig +``` + +Download the ISO image: +``` +wget https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.4.2_20180615/securityonion-16.04.4.2.iso +``` + +Verify the downloaded ISO image using the signature file: +``` +gpg --verify securityonion-16.04.4.2.iso.sig securityonion-16.04.4.2.iso +``` + +The output should show "Good signature" and the Primary key fingerprint should match what's shown below: +``` +gpg: Signature made Tue 19 Jun 2018 03:10:02 PM EDT using RSA key ID ED6CF680 +gpg: Good signature from "Doug Burks " +gpg: WARNING: This key is not certified with a trusted signature! +gpg: There is no indication that the signature belongs to the owner. +Primary key fingerprint: BD56 2813 E345 A068 5FBB 91D3 788F 62F8 ED6C F680 +``` + +Once you've verified the ISO image, you're ready to proceed to our Installation guide: +https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation