diff --git a/checksums.txt b/checksums.txt index 6fbddc41..5c931f59 100644 --- a/checksums.txt +++ b/checksums.txt @@ -1,3 +1,8 @@ +16.04.4.3 ISO image +md5sum dbfb0121ab106d2e93366e259533a66e +sha1sum 86181131357c87704c9e5323ee6d848461c762a9 +sha256sum af133a8cd32a306604cde761b27c3fd41fae1bb5a685bc812028c5934c03f6f8 + 16.04.4.2 ISO image md5sum b9c3908c1613f0ca92248810ba7c7b66 sha1sum 4f9758144b27d965e7e7a759a8203aa684508957 diff --git a/sigs/securityonion-16.04.4.3.iso.sig b/sigs/securityonion-16.04.4.3.iso.sig new file mode 100644 index 00000000..9099fe3f Binary files /dev/null and b/sigs/securityonion-16.04.4.3.iso.sig differ diff --git a/testing/Verify_ISO_16.04.4.3.md b/testing/Verify_ISO_16.04.4.3.md new file mode 100644 index 00000000..d89ebb67 --- /dev/null +++ b/testing/Verify_ISO_16.04.4.3.md @@ -0,0 +1,51 @@ +### 16.04.4.3 ISO image built on 2018/07/13 + +### Download and Verify + +16.04.4.3 ISO image: +https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.4.3_20180713/securityonion-16.04.4.3.iso + +Signature for ISO image: +https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.4.3.iso.sig + +Signing key: +https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS + +For example, here are the steps you can use on most Linux distributions to download and verify our Security Onion ISO image. + +Download the signing key: +``` +wget https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS +``` + +Import the signing key: +``` +gpg --import KEYS +``` + +Download the signature file for the ISO: +``` +wget https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.4.3.iso.sig +``` + +Download the ISO image: +``` +wget https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.4.3_20180713/securityonion-16.04.4.3.iso +``` + +Verify the downloaded ISO image using the signature file: +``` +gpg --verify securityonion-16.04.4.3.iso.sig securityonion-16.04.4.3.iso +``` + +The output should show "Good signature" and the Primary key fingerprint should match what's shown below: +``` +gpg: Signature made Fri 13 Jul 2018 04:28:03 PM EDT using RSA key ID ED6CF680 +gpg: Good signature from "Doug Burks " +gpg: WARNING: This key is not certified with a trusted signature! +gpg: There is no indication that the signature belongs to the owner. +Primary key fingerprint: BD56 2813 E345 A068 5FBB 91D3 788F 62F8 ED6C F680 +``` + +Once you've verified the ISO image, you're ready to proceed to our Installation guide: +https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation