• Re: Looking for SHA256SUMS for Debian 12

    From Soren Stoutner@21:1/5 to All on Mon Apr 15 14:26:33 2024
    Copy: jens.hermann10@gmail.com (Jens Hermann)

    This is a multi-part message in MIME format.

    --nextPart13931494.ClOBMUTdjC
    Content-Transfer-Encoding: 7Bit
    Content-Type: text/plain; charset="us-ascii"

    You can find them here:

    https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/[1]


    On Monday, April 15, 2024 12:52:12 PM MST Jens Hermann wrote:
    Dear Sir or Madam,

    I downloaded "debian-12.5.0-amd64-netinst.iso" from the website https://www.debian.org/. I would now like to carry out an Integrity & Authenticity check. Where can I find the sha256sum and sha256sum.sign files? Thank you very much in advance.

    Jens Hermann

    Am Anwender 2
    35713 Eschenburg
    Mobile: +49157 / 866 10176


    --
    Soren Stoutner
    soren@debian.org

    --------
    [1] https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/

    --nextPart13931494.ClOBMUTdjC
    Content-Transfer-Encoding: 7Bit
    Content-Type: text/html; charset="us-ascii"

    <html>
    <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    </head>
    <body><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">You can find them here:</p>
    <br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;"><a href="https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/">https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/</a></p>
    <br /><br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">On Monday, April 15, 2024 12:52:12 PM MST Jens Hermann wrote:</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Dear Sir or Madam,</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; </p> <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; I downloaded &quot;debian-12.5.0-amd64-netinst.iso&quot; from the website</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; https://www.debian.org/. I would now like to carry out an Integrity &amp;</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Authenticity check. Where can I find the sha256sum and sha256sum.sign files?</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Thank you very much in advance.</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; </p> <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Jens Hermann</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; </p> <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Am Anwender 2</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; 35713 Eschenburg</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Mobile: +49157 / 866 10176</p>
    <br /><br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">-- </p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Soren Stoutner</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">soren@debian.org</p>
    </body>
    </html>
    --nextPart13931494.ClOBMUTdjC--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmYdm4kACgkQwufLJ66w tgOHyQ/+M5vhxISXC4pdLMxjTFWYkppAe65DrHtBROUpYfVfQdP6o5FU8BNyHIGl drRyrRRe9MPCkvp9Sx8tfW4SOihC5EDzt4oi07Xkx/eli/jWgq0vlPIZnJFhz9Bz 51jrXfvyOyxAxhuZ1mwbDLzOzXOLz0PX2ybHgSo7me3duWHL55aXMB6dFCIycAPZ rGnoERoBviigCwp/hs8x0DnHH/UF8zk+uEW/izEUBDLy4nLTZANVSEaS9apTUBjb vrdA+xwo3GpEXqSkLkQXvLAgLVzraptCDwBjmT7alnhfS4wbI0iZ+dfpeRrRt9O8 ZssVe1MtAsptfS/Yf+sWr6vajIXu+ADtzoWrSgzhqu4GMwWahuuwQlcsjcfn8xzW ePk9hW5FeVQaCAM2GcsS5Pr0oBNuYAeCkq9COzIg6+5QAHNKOLT7FzrCB+xKgKT9 Wd//Uvz7qNlZaJNzT2d9sWptBlqXxxPqKdLWJF5bByamzMFok3RdMdRhPIvbC6ks WG6pjYtCcd1cLembikSzAojLI72bFhaXBkOpLaowtikRZhiZ7wjREC0cC0NnDFxV qwL4LYtOKKbVeGqG6lblUDkDytUs8g4KVJG2/1EFJDOrXPAzU2+7v6OqoE/pwVro Z8+4RTqBwaAKGO02BqCAkTU8KYZxNPvIqiDBXa84leaBNX4Jwgg=
    =3ASf
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Jens Hermann on Tue Apr 16 13:00:02 2024
    On Tue, Apr 16, 2024 at 11:35:11AM +0200, Jens Hermann wrote:
    Dear Sir or Madam,

    Thank you very for your answers.

    I have another question about verification.
    On Linux there is the following command to import the signing key:
    gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-key "27DE B156 44C6
    B3CF 3BD7 D291 300F 846B A25B AE09"
    or.
    gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-key A25BAE09
    gpg --list-key --with-fingerprint A25BAE09

    How can I get theĀ  signing key for "debian-12.5.0-amd64-netinst.iso"?
    This is answered on https://www.debian.org/CD/verify , linked from the
    same page you were given.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmYeUsMtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh e48P/1uJE98DspxLYThXU9/uQS2zWr6/sv6TfEoOax/Qj2ssUpab6W31F5lEuGJl /lzHtoD508XhNJTUZkt0Jx13GUvNdiU/7vy/u0Q6vOshFqHS0rklB2QSeFDwmMRt l8ikRp7SQ26EclvBS/tS7rnpDUmtfkxbfxBdMcHioDWlPU6cw7If4cjB7L0WlQrg oR2nYCsSZl8KIGNALmvE5HPGaNWGmZprdwUlEDKZbzb2G77lP0uSpF7+Lrp3U2VT /YEctjC1G6PTLqaXeqX4rkqlpQtXDNr7uJXgJXd6Gl5JX4XgVV9GrmCBXmohnCGB jK+nN0ZT4zHAgF+yCNYRzKBdOU4+/iBnPtoYM/6pr69RVxwweyI6faGg1rLQAe1A LZrV1BOqCFlshO8CcF/lNNooPQBHLDS1dMpzAcKChgm5g6zHcyl9L8gbLpdOXFNt enuAQjxDIw51zG/bndnObmeaIzKxVjtqAWXdmvoLma/FqSSUlsBpHcSVPV9Quu/Q vREU+brQ31qA+cN8qAjErYt0tQqyJg22ptfjvdRXd+/MS/c2/mZp8950lPJLo1fI ECIEOACTV6L//8pQI+je5kT1Fq4mYh0q2eyIJ98rF37UcunYfuuuh7nP22RCENME 0IC+ZsuFGS4a04aGHQhiUtGXpMXhdRwBelOCAFPH73FiQimC
    =A0GF
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dan Purgert@21:1/5 to Jens Hermann on Tue Apr 16 13:10:01 2024
    On Apr 16, 2024, Jens Hermann wrote:
    Dear Sir or Madam,

    Thank you very for your answers.

    I have another question about verification.
    On Linux there is the following command to import the signing key:
    gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-key "27DE B156 44C6
    B3CF 3BD7 D291 300F 846B A25B AE09"
    or.
    gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-key A25BAE09
    gpg --list-key --with-fingerprint A25BAE09

    How can I get the  signing key for "debian-12.5.0-amd64-netinst.iso"?

    The current signing keys are listed here:
    https://www.debian.org/CD/verify


    Though if you've already got a Debian system, I believe they're included
    in the release already.

    --
    |_|O|_|
    |_|_|O| Github: https://github.com/dpurgert
    |O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1 E067 6D65 70E5 4CE7 2860

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3asj+xn6fYUcweBnbWVw5UznKGAFAmYeTFQACgkQbWVw5Uzn KGBHmRAAqw20hoCxdlydb2gVEGK45h9YLsXuo0oxMM5n8XptBvzSS0Z1dqJ+y47M 2xY8GmrNYQo/A7kYbSojT9lRzVuU2VFnrpKAxRsfOMuihoFtIoHklenxFqZORLfn 8sbtOm3kiccQQL5skaYWH+SsuhPJ3RYtj7BzeT/N0roX5Oc/ii1M8llew3UH9X3d e63JOgux9Gl4/EOPrF42pJlwfsUism4oStZaLqntWFj6qdaAA1JBwUHfVkWRoEyz HnTfrE60KaJJTYoCxucFjwDlKStsNli/nLO2wQPivASjnBfNpVXbvnQKcs+8rDVg hkZagx/EUk7+4AiCkefhWZsFZdJAPQK2hYHG/D5vXoIxhdrYHsef9LeZ3MOjMLno nk3+S/xsXZrVKK/ML4EVJmlStIn0HISKEWntKSUu9kDT02PatbIGjS9kyIrxHieK JbrduMQHdba7Kx//58PXyeJFOVQ4Bt73Ei53UXXDFD9Bq9p8vkVKktU+O76uQ+VQ V8B/FH/DGOnOUB5nxZVwOPN2rfKNpOV7oQIH+QG2wzTZEM2kFOXJO4wintOp1wwa 0W3sgRFMVS/a/gcHYAo6E8kscKQNulmKejNyJ1p8Qb4QB9cgYjn0oCYizGrYgeG5 DRKXaPdeJqEsosWMHnf98K1Ythj42nrw0AUs17SIW35vljDLUNg=
    =DnNj
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Us