while going through the verify procedures as described http://www.debian.org/CD/verify
For newer releases, newer and cryptographically stronger checksum algorithms (SHA1, SHA256 and SHA512) are used, and there are equivalent tools available to work with these. paper@Dhost:~/Downloads$ sha1sum debian-7.1.0-amd64-netinst.iso c8fe5de7d4ee9ca5238e660bd6fcfe7dd572c094 debian-7.1.0-amd64-netinst.iso ------------------------------------------------------------------------- paper@Dhost:~/Downloads$ sha256sum debian-7.1.0-amd64-netinst.iso 62232b8adc281c04f9985e4a1541481a468b3b2ca1702a0dd7f62fcf56ef101b debian-7.1.0-amd64-netinst.iso --------------------------------------------------------------------------------------------------- paper@Dhost:~/Downloads$ sha512sum debian-7.1.0-amd64-netinst.iso b25aea6a759ff8bb415bb66ee9a2dc7b9db272770b238e3ab8bbba54ac1a380b5efeed20114b682ba32f176a028457f3df1b276e0229537af1a97eeb122f357c debian-7.1.0-amd64-netinst.iso ------------------------------------------------------------------------- To ensure that the checksums files themselves are correct, use GnuPG to verify them against the accompanying signature files (e.g. MD5SSUMS.sign) The keys used for these signatures are all in the Debian GPG keyring and the best way to check them is to use that keyring to validate via the web of trust. To make life easier for users, here are the fingerprints for the keys that have been used for releases in recent years (with some UIDs removed for clarity): clicking on the link in that paragraph and going to http://keyring.debian.org/ The server may be accessed with gpg by using the --keyserver option in combination with either of the --recv-keys or --send-keys actions. looking at man gpg there are no options and all commands. which command or combo of commands should be used. do i need to set up a key while using an insecure machine. i have been swimming through this jungle of confusion for a few years and am slowly coming to understand its actual structure. while i do work a graveyard shift am in fatigue 24 hours trying to learn the debian way is difficult at times. i have studied C and Bash and many other languages. but the the instructions here and there can be frusterating. thank you, in advance, for the help -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cahjcrbw5embmc1hcv3b7znuztxopmdcppin8tjcm7oquhsh...@mail.gmail.com
