Re: Verifying authenticity of Debian CDs

On Fri, 24 Jul 2020 Andrew Cater wrote: And it turns out that /etc/apt/trusted.gpg has the buster-stable, the buster-automatic and the buster-security keys by default but _NOT_ the debian-cd signing key so the stage of importing the key to match the specific Debian CD signing key is still valid.

Re: Verifying authenticity of Debian CDs

On Fri, 24 Jul 2020 Stefan Monnier wrote: [On 24 Jul 2020 Semih Ozlem wrote:] when I run the command gpg --verify SHAxSUM.sign SHAxSUM I get a message saying that Can't check signature: No public key Somone recently asked a similar question. In case you already have access to a debian system

Re: Verifying authenticity of Debian CDs

On 7/24/2020 6:08 PM, Semih Ozlem wrote: No that does not work, for some reason it is saying "no command supplied" when corrected with dashes before verify I am getting the old problem Yep, I forgot the dashes befor 'verify'.. 'gpg --keyserver-options auto-key-retrieve --verify SHA512SUMS.sign

Re: Verifying authenticity of Debian CDs

And it turns out that /etc/apt/trusted.gpg has the buster-stable, the buster-automatic and the buster-security keys by default but _NOT_ the debian-cd signing key so the stage of importing the key to match the specific Debian CD signing key is still valid. All best, as ever, Andy C. On Fri, Jul

Re: Verifying authenticity of Debian CDs

I've just written up longer instructions on my own web page at FLOSSlinux which should explain the steps I've just followed for myself. Check those and see what you think. I'll have a go at importing from /etc/apt/trusted.gpg and see what that looks like. That

Re: Verifying authenticity of Debian CDs

> when I run the command > gpg --verify SHAxSUM.sign SHAxSUM > I get a message saying that > > Can't check signature: No public key You should have the needed key(s) in /etc/apt/trusted.gpg, but to be honest I don't know how to best pass those to GPG. Stefan

Re: Verifying authenticity of Debian CDs

On 7/24/2020 5:50 PM, Semih Ozlem wrote: On the web page https://www.debian.org/CD/verify I am trying to follow the next paragraph. "To ensure that the checksums files themselves are correct, use GnuPG to verify them against the accompanying signature files (e.g. SHA512SUMS.sign). The keys used f

Verifying authenticity of Debian CDs

On the web page https://www.debian.org/CD/verify I am trying to follow the next paragraph. "To ensure that the checksums files themselves are correct, use GnuPG to verify them against the accompanying signature files (e.g. SHA512SUMS.sign). The keys used for these signatures are all in the Debian G

Re: Verifying authenticity of Debian CDs

Hi, i wrote in https://lists.debian.org/debian-user/2019/04/msg00214.html > > > SHA512SUMS.sign [...] SHA512SUMS [...] debian-9.8.0-amd64-netinst.iso john doe wrote: > > $ sha512sum -c --ignore-missing > > The '--strict' option could also be used. Steve McIntyre wrote: > If you're happy for me

Re: Verifying authenticity of Debian CDs

[ I often skim the debian-user list, but when I'm away on vacation or at a conference I'll miss things unless I'm directly CC:ed ] Thomas wrote: >Hi, > >Chris XX wrote: >> I was trying to Verify the authenticity of Debian CDs on your website, but I >> don't see instructions that will guide me th

Re: Verifying authenticity of Debian CDs

On 4/11/2019 6:35 PM, Default User wrote: > On Fri, Apr 5, 2019, 18:06 Thomas Schmitt wrote: > >> Hi, >> >> Chris XX wrote: >>> I was trying to Verify the authenticity of Debian CDs on your website, >> but I >>> don't see instructions that will guide me through the process >>> (step-by-step). >> >

Re: Verifying authenticity of Debian CDs

On Fri, Apr 5, 2019, 18:06 Thomas Schmitt wrote: > Hi, > > Chris XX wrote: > > I was trying to Verify the authenticity of Debian CDs on your website, > but I > > don't see instructions that will guide me through the process > > (step-by-step). > > (We are the users. But some Debian Developers are

Re: Verifying authenticity of Debian CDs

On 4/5/2019 10:26 PM, Chris XX wrote: > I was trying to Verify the authenticity of Debian CDs on your website, but What flavor of Debian do you want to instal? What OS ("linux","Windows,""Mac") are you using to download "Debian"? > I don't see instructions that will guide me through the process >

Re: Verifying authenticity of Debian CDs

Hi, Chris XX wrote: > I was trying to Verify the authenticity of Debian CDs on your website, but I > don't see instructions that will guide me through the process > (step-by-step). (We are the users. But some Debian Developers are watching, too.) Obviously there is a gap between checksum file ve

Re: Verifying authenticity of Debian CDs

On 4/5/19, Chris XX <1swansb...@gmail.com> wrote: > I was trying to Verify the authenticity of Debian CDs on your website, but > I don't see instructions that will guide me through the process > (step-by-step). > > Can you help and/or fix? > Thanks, Chris > > P.S. this was the site I got stuck on:

Verifying authenticity of Debian CDs

I was trying to Verify the authenticity of Debian CDs on your website, but I don't see instructions that will guide me through the process (step-by-step). Can you help and/or fix? Thanks, Chris P.S. this was the site I got stuck on: https://www.debian.org/CD/verify There is a lot of information