-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-openldap-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-openldap-19.0-trixie-amd64.iso c2cc1b22ec331e488a5b35ee45d6ddcdd13d5162ba60bcb529711d2305710cde turnkey-openldap-19.0-trixie-amd64.iso $ sha512sum turnkey-openldap-19.0-trixie-amd64.iso decc5721e7282bbed9857ae81d9ad884dbeebdb876f4f4c0d4fce5ee04cb6e6b85d2bf6f0a4b1c87e19bf3ffab39b4687bc0ac146bea27087d4177731bdec34e turnkey-openldap-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-openldap-19.0-trixie-amd64.iso.hash turnkey-openldap-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-openldap-19.0-trixie-amd64.iso.hash turnkey-openldap-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjC4ACgkQ2fx1wp0K Azvdlg/+LsjUIyX44KY9WTlxT1jcnpDY39PkQeGLoqQu8cOTA0HdyrshT0gBL8LL msf2NbzqS8CAgydPWYlKOX/m+dkOGqyApiHd3Uq5dJEVBigQkGMPqp8cysP65rJd zdKlKo5KRLit9Pwlhq8IycXIAq3wD2T9gELMHb97dhl3LLBFi8caJ1PygwSh0CmY EDazanM6jGpWFb8LlwsAugOEdy324I9dH8qVE9M2bQFU3NXLwTfoEaLZeAYtsoRd 5/iLnedEfcHMOnbJYIFgrrJywuo8tZ3y5exfR4r6lRTVIJQjO3IP65X8L42bGcXU ZH4H6T399O02KnNApUUYytXQgHYZScv7hfb78Ar4Vf5m8wHBkXos+jAubJHR1zuu qpbDIu+TqSeiRtLsYjl3EbTwjeyhOmzDkUZp7f0BH6/TuwW7Wo+b/vgfRXdLwmyy m1XNmZ7gTov7xWg/z535jHW1/OkKNIMyoURfNanDyfCDjnzsCAkydv0DQcsN6Ltr cbVCYPxUWHpe4SuenWfRFmeI48GcBIiG0lJ2UbxD1dwKoUtJmZ+pIg8dzonR0ISq K6fdu+3Y6cY7svkyP8h8cI5L7ii2c5HNqsTzvdj1YKosAdJoGPdxcLW7zA7OVQ7L FNe2ldH7Wc5uBcqvufmnVZIJEe3Tp4TYyn6DEi0hPHWEWt331Hs= =FbUL -----END PGP SIGNATURE-----