-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-suitecrm-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-suitecrm-19.0-trixie-amd64.iso b0788f745d792b57b3fd7d738a9c7c504c63cc67129356d17f31646a8e5766f6 turnkey-suitecrm-19.0-trixie-amd64.iso $ sha512sum turnkey-suitecrm-19.0-trixie-amd64.iso bc062616018d45ebd665313eb288101edbe9ccd1a7096cc75e5a4be2c7b63e31353d3ad847d6db8607d572d6e5d253d2d36f841dc14a92c9089888c6a5db74cc turnkey-suitecrm-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-suitecrm-19.0-trixie-amd64.iso.hash turnkey-suitecrm-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-suitecrm-19.0-trixie-amd64.iso.hash turnkey-suitecrm-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDcACgkQ2fx1wp0K AztFYA/+PQOPAhapLt+2pLeG86+wFpAn8Wtdt/1OpGBxlpwlKgiwrtHXApZBT9vT rb43tSgf2DOxWkVAC7oPE/bE3d7yirJgAON7IHwE9ZzJzD/i4NgrdBlWqYlNRjbd fhRajj4WaSBPc+PUkaYbKvRxBy7ZUt/QCSEqlW18iQv7e6K6Ldz7FU4qSVM4zxCl 4MUCcQDkz1YLxxkKD+tXEVu6+BLjs1mgQUziTm/A5q9jpiDOLAukYoGXPrCV1CB0 FaRCvpOEjF68T6pStQfdB2D1dOuCR7Im4kDJ/K33FKzkCfYPGcBFTF2wr9aRg9Hs 0pfhTUKJLplI8EQ4gnLM9aMRI5y3p4finVV7BhuKwgaSDPc4GJH16B0/i18VnHOt bd1gWTmtcbQSMs/ghXQf79H3KuC04CkLuEUgVFLjeijCszb8STOdsQhjohdsuYVq PYoQcSwhJO1zcZt6C0gHZbecCENGe/4eyoFbdrg134mJOJ5qH+U1kBukymOuWx2L VeqMGk2OFtCdji4loRLuZtLOLA2UYWLYKCGD0GCpnTwwkVLpikSf7UzVrOp7M43v Q6BP34N6e+8pECx3NuyxR23IJ7YLu9HOx1zTR5cmBz7jcNnjnkAP/+HXAoEG2vYs 8Qy+nWSIow4iUevWN8W+EkrF1Rr6oOi+O+H/ts3q/wmw/5KAfnE= =YDyQ -----END PGP SIGNATURE-----