diff --git a/checksums.txt b/checksums.txt index 57562d87..1532bb9f 100644 --- a/checksums.txt +++ b/checksums.txt @@ -1,3 +1,8 @@ +16.04.5.6 ISO image +md5sum bbe687c6bb0c58ff04aff857b915f0c9 +sha1sum b986922f9d66c0a50aaa4fcfe8ba60dc0e6cf090 +sha256sum c5ce01ba890be9776630bd1f178cfc7a76a9124e4739b1df7428d5f61eb9f9d3 + 16.04.5.5 ISO image md5sum 9cc1031f43ece3e65e61df8df466d9a7 sha1sum 7ac73487bc7f4b1f592c496a6a6349051ef59c5b diff --git a/sigs/securityonion-16.04.5.6.iso.sig b/sigs/securityonion-16.04.5.6.iso.sig new file mode 100644 index 00000000..c347535e Binary files /dev/null and b/sigs/securityonion-16.04.5.6.iso.sig differ diff --git a/testing/Verify_ISO_16.04.5.6.md b/testing/Verify_ISO_16.04.5.6.md new file mode 100644 index 00000000..a9eaefcf --- /dev/null +++ b/testing/Verify_ISO_16.04.5.6.md @@ -0,0 +1,51 @@ +### 16.04.5.6 ISO image built on 2019/01/10 + +### Download and Verify + +16.04.5.6 ISO image: +https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.5.6_20190110/securityonion-16.04.5.6.iso + +Signature for ISO image: +https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.5.6.iso.sig + +Signing key: +https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS + +For example, here are the steps you can use on most Linux distributions to download and verify our Security Onion ISO image. + +Download the signing key: +``` +wget https://raw.githubusercontent.com/Security-Onion-Solutions/security-onion/master/KEYS +``` + +Import the signing key: +``` +gpg --import KEYS +``` + +Download the signature file for the ISO: +``` +wget https://github.com/Security-Onion-Solutions/security-onion/raw/master/sigs/securityonion-16.04.5.6.iso.sig +``` + +Download the ISO image: +``` +wget https://github.com/Security-Onion-Solutions/security-onion/releases/download/v16.04.5.6_20190110/securityonion-16.04.5.6.iso +``` + +Verify the downloaded ISO image using the signature file: +``` +gpg --verify securityonion-16.04.5.6.iso.sig securityonion-16.04.5.6.iso +``` + +The output should show "Good signature" and the Primary key fingerprint should match what's shown below: +``` +gpg: Signature made Thu 10 Jan 2019 08:11:38 AM EST using RSA key ID ED6CF680 +gpg: Good signature from "Doug Burks " +gpg: WARNING: This key is not certified with a trusted signature! +gpg: There is no indication that the signature belongs to the owner. +Primary key fingerprint: BD56 2813 E345 A068 5FBB 91D3 788F 62F8 ED6C F680 +``` + +Once you've verified the ISO image, you're ready to proceed to our Installation guide: +https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation