-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import $ gpg --list-keys --with-fingerprint release@turnkeylinux.com pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] Key fingerprint = 694C FF26 795A 29BA E07B 4EB5 85C2 5E95 A16E B94D uid Turnkey Linux Release Key $ gpg --verify turnkey-dokuwiki-14.2-jessie-amd64.ova.hash gpg: Signature made using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key " For extra credit you can validate the key's authenticity at: https://keybase.io/turnkeylinux 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-dokuwiki-14.2-jessie-amd64.ova a25ecf942c369e52dcbbaf77dc38e115df6d7b398f0de16569dccaf1b0befa95 turnkey-dokuwiki-14.2-jessie-amd64.ova $ sha512sum turnkey-dokuwiki-14.2-jessie-amd64.ova 2bff408f9e5cc0d0b96894a837567811f767a553a6d379129e3748cd3183661ef23f835ed04bd7f662599a6dc0edc00667bd048faad4dbb63238914dbc46f716 turnkey-dokuwiki-14.2-jessie-amd64.ova Note, you can compare hashes automatically:: $ sha256sum -c turnkey-dokuwiki-14.2-jessie-amd64.ova.hash turnkey-dokuwiki-14.2-jessie-amd64.ova: OK $ sha512sum -c turnkey-dokuwiki-14.2-jessie-amd64.ova.hash turnkey-dokuwiki-14.2-jessie-amd64.ova: OK -----BEGIN PGP SIGNATURE----- iQEcBAEBCAAGBQJZNo91AAoJEIXCXpWhbrlNOVkIAIfoDvdgpHU91tFnljs08wwH IECO6yEKIvbgYsXcZyEUrXxC0Gv4kcMvbuMwHuI07lJeW/0mlRIbNn0LrxMQ4G48 rrG+/LoAN/zs4r5dsXPCiKSE7iKVyykFb1/0tIx7Q7Tnhdy38RoDN/wdUP6iw93C GqU+Z4SyH2D/wChVPvoeotqfrcjImFzbBREw0KRgDbRUikDe1bPXOGWVEyQew5bG u7PbrfpeVQR88Pn1zwJt0OFMuhw2Jy06Q2mHHUG801OH87oPb3hZNUjmw56gVwkr UvJ5R4OdfxIGfApHadavs2SyfNOIDBQEawUXoN0HpBQ3IxbIMGP+fINnI/vHu30= =fl8c -----END PGP SIGNATURE-----