News: This forum is now permanently frozen.
Pages: [1]
Topic: Verify image  (Read 1579 times)
« on: May 10, 2010, 17:26:15 »
capt_cosmo *
Posts: 1

Hi there,
how can I verify the m0n0wall image using the public RSA signature?

thanks
« Reply #1 on: May 10, 2010, 17:33:37 »
Fred Grayson *****
Posts: 994

The image files that can be downloaded have both an MD5 checksum and a SHA256 hash available to verify image integrity. You will need a program that verifies files against those types of checksums, or a program that generates those types of checksums from a file, and then you can manually compare them.

There are no detached RSA signatures available, AFAIK.


--
Google is your friend and Bob's your uncle.
« Reply #2 on: May 10, 2010, 17:40:49 »
Manuel Kasper
Administrator
*****
Posts: 364

In addition to what Fred said - if you really want to check the embedded RSA signature instead of simply verifying the MD5/SHA256 hash: the source code of the signature verification utility is available here:

http://svn.m0n0.ch/wall/branches/freebsd6/build/tools/verifysig.c

And the public RSA key used to sign m0n0wall images is here:

http://svn.m0n0.ch/wall/branches/freebsd6/etc/pubkey.pem
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines