How to verify mageia iso singnatures

This forum is for general chat between members about Mageia.

Technical questions are supposed to be posted in support forums. Not here !

How to verify mageia iso singnatures

Postby ahsanraza » Aug 6th, '13, 14:57

I download mageia but in download page there is written you should
check signatures if these does not match then don't use this iso.
I want to know how to check the signatures whereas I download the iso
file.the file name is Mageia-3-i586-DVD.iso and its size is 3.71gb I
downloaded this file from Canada server.
ahsanraza
 
Posts: 9
Joined: Aug 6th, '13, 14:56

Re: How to verify mageia iso singnatures

Postby filip » Aug 6th, '13, 15:27

There is some possibly helpful information in this wiki page.
filip
 
Posts: 474
Joined: May 4th, '11, 22:10
Location: Kranj, Slovenia

Re: How to verify mageia iso singnatures

Postby ahsanraza » Aug 6th, '13, 15:39

I did not understand the page you send.
I want to tell you that downloaded iso file is working.
It is correct or not?
or it is must to check the signatures?

and I also want to tell you I am using windows 7 I have downloaded iso file only.i cant understand what you are saying please describe me easy words.
ahsanraza
 
Posts: 9
Joined: Aug 6th, '13, 14:56

Re: How to verify mageia iso singnatures

Postby filip » Aug 6th, '13, 16:16

What do you mean by "downloaded iso file is working"? How did you test it?

Checking the downloaded ISO file integrity is not a must but it's highly recommended. There are different methods for that but all involve md5 or sha1 value somehow as it tells the correct result for integrity (md5 or sha1) algorithm. This algorithm reads given ISO file and calculate (md5 or sha1) value for it. If both values (calculated one and the other given on the web page) are the same there is extremely high probability that ISO file has transferred fully and correctly and also that it wasn't tampered somehow.
For Windows there are many programs like this one to do it. Many programs for burning have also ability to check md5 or sha1 if you'll use optical media.

For install from USB flash stick you can see this page.
filip
 
Posts: 474
Joined: May 4th, '11, 22:10
Location: Kranj, Slovenia

Re: How to verify mageia iso singnatures

Postby filip » Aug 18th, '15, 08:19

andwheeler wrote:Where arrive directions that instruct you to confirm the marks? I went to the Mageia 4 downloads page and they don't say anything in regards to marks. When I download the downpour document there is no signature records packaged with it (just hash checksums). More often than not, when programming is marked it is utilizing PGP/GPG or S/MIME. Share your source. Help me help you.

I'm not sure if I understand you correctly but you can find checksum (md5sum and sha1sum) when you click "Direct Link" on Mageia 5 downloads page.
I don't recommend to use Mageia 4 much longer as it will soon reach EOL. Date for that is September 19th, 2015 on it's download page.
If you use torrent it has built in mechanism to check downloaded file integrity.
You can check Mageia source code here.
Last edited by filip on Aug 18th, '15, 15:41, edited 1 time in total.
filip
 
Posts: 474
Joined: May 4th, '11, 22:10
Location: Kranj, Slovenia

Re: How to verify mageia iso singnatures

Postby jkerr82508 » Aug 18th, '15, 12:50

Mageia iso's are not signed and so there is no signature to check. (The download page is misleading in that respect.) What the download page should say is that you can use the md5sum or sha1sum to check that the downloaded file is complete and correct, as described in filip's post.

The individual packages on the iso are signed with the Mageia PGP Public Key. That key is verified by the package manager when the packages are installed. The KEY is on the iso in the file /x86_64/media/core/media_info/pubkey.

Jim
jkerr82508
 
Posts: 946
Joined: Mar 26th, '11, 01:34
Location: Fife, Scotland

Re: How to verify mageia iso singnatures

Postby doktor5000 » Aug 18th, '15, 19:16

Submitted https://bugs.mageia.org/show_bug.cgi?id=16602 to our web team, to replace "signatures" by "checksums" on the download page.
Cauldron is not for the faint of heart!
Caution: Hot, bubbling magic inside. May explode or cook your kittens!
----
Disclaimer: Beware of allergic reactions in answer to unconstructive complaint-type posts
User avatar
doktor5000
 
Posts: 17629
Joined: Jun 4th, '11, 10:10
Location: Leipzig, Germany


Return to General discussions about Mageia

Who is online

Users browsing this forum: No registered users and 1 guest

cron