james gray wrote: > how does a person find the signature files using #md5sumsums
They are in the directory next to the iso images: http://cdimage.debian.org/debian-cd/6.0.5/amd64/iso-cd/ MD5SUMS 13-May-2012 13:32 4.4K MD5SUMS.sign 13-May-2012 14:02 836 SHA1SUMS 13-May-2012 13:32 4.9K SHA1SUMS.sign 13-May-2012 14:02 836 SHA256SUMS 13-May-2012 13:32 6.6K SHA256SUMS.sign 13-May-2012 14:02 836 SHA512SUMS 13-May-2012 13:32 11K SHA512SUMS.sign 13-May-2012 14:02 836 Those are the sum files. > To ensure that the checksums files themselves are correct, use GnuPG to > verify them against the accompanying signature files #(e.g. MD5SSUMS.sign). Yes. > i have looked in the cmi using md tab tab and find no #md5sum sum. What is the "cmi"? > could some one please assist me with understanding #md5sum sum and finding > the signature file. If nothing else you can go here and download the matching MD5SUM or SHA512SUM files: http://cdimage.debian.org/debian-cd/6.0.5/amd64/iso-cd/ Then to verify them against your downloaded images: $ md5sum -c MD5SUMS $ sha512sum -c SHA512SUM To verify the sum file itself using the gpg signature. $ gpg MD5SUM.sign $ gpg SHA512SUM.sign Bob
signature.asc
Description: Digital signature
