Checksum Tools


• sha256sum (CLI)
• sha512sum (CLI)
• GtkHash (GUI)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

• Download the key file

wget https://ossec.github.io/files/OSSEC-ARCHIVE-KEY.asc


• Inspect the key file to confirm it has XXX as its keyid.

gpg --keyid-format long --show-key OSSEC-ARCHIVE-KEY.asc


• If correct, then import the key:

gpg --import OSSEC-ARCHIVE-KEY.asc


• Download the software package

wget https://github.com/ossec/ossec-hids/archive/2.9.3.tar.gz


• Download the signature file

wget https://github.com/ossec/ossec-hids/releases/download/2.9.3/ossec-hids-2.9.3.tar.gz.asc


• Verify it

gpg --verify ossec-hids-2.9.3.tar.gz.asc 2.9.3.tar.gz

Index