update sigs and testing instructions for 16.04.5.6

checksums.txt

@@ -1,3 +1,8 @@
+16.04.5.6 ISO image
+md5sum bbe687c6bb0c58ff04aff857b915f0c9
+sha1sum b986922f9d66c0a50aaa4fcfe8ba60dc0e6cf090
+sha256sum c5ce01ba890be9776630bd1f178cfc7a76a9124e4739b1df7428d5f61eb9f9d3
+
 16.04.5.5 ISO image
 md5sum 9cc1031f43ece3e65e61df8df466d9a7
 sha1sum 7ac73487bc7f4b1f592c496a6a6349051ef59c5b

testing/Verify_ISO_16.04.5.6.md

@@ -0,0 +1,51 @@
+### 16.04.5.6 ISO image built on 2019/01/10
+
+### Download and Verify
+
+16.04.5.6 ISO image:  
+https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.5.6_20190110/securityonion-16.04.5.6.iso
+
+Signature for ISO image:  
+https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.5.6.iso.sig  
+
+Signing key:  
+https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS  
+
+For example, here are the steps you can use on most Linux distributions to download and verify our Security Onion ISO image.
+
+Download the signing key:  
+```
+wget https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS
+```
+
+Import the signing key:  
+```
+gpg --import KEYS
+```
+
+Download the signature file for the ISO:  
+```
+wget https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.5.6.iso.sig
+```
+
+Download the ISO image:  
+```
+wget https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.5.6_20190110/securityonion-16.04.5.6.iso
+```
+
+Verify the downloaded ISO image using the signature file:  
+```
+gpg --verify securityonion-16.04.5.6.iso.sig securityonion-16.04.5.6.iso
+```
+
+The output should show "Good signature" and the Primary key fingerprint should match what's shown below:
+```
+gpg: Signature made Thu 10 Jan 2019 08:11:38 AM EST using RSA key ID ED6CF680
+gpg: Good signature from "Doug Burks <[email protected]>"
+gpg: WARNING: This key is not certified with a trusted signature!
+gpg:          There is no indication that the signature belongs to the owner.
+Primary key fingerprint: BD56 2813 E345 A068 5FBB  91D3 788F 62F8 ED6C F680
+```
+
+Once you've verified the ISO image, you're ready to proceed to our Installation guide:  
+https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation