diff --git a/VERIFY_ISO.md b/VERIFY_ISO.md index 9445e76fa..3fb630f9e 100644 --- a/VERIFY_ISO.md +++ b/VERIFY_ISO.md @@ -1,18 +1,18 @@ -### 2.3.290-20240229 ISO image built on 2024/02/29 +### 2.3.300-20240401 ISO image built on 2024/04/01 ### Download and Verify -2.3.290-20240229 ISO image: -https://download.securityonion.net/file/securityonion/securityonion-2.3.290-20240229.iso +2.3.300-20240401 ISO image: +https://download.securityonion.net/file/securityonion/securityonion-2.3.300-20240401.iso -MD5: D2A7BBDA25F311B7944A95655CC439CE -SHA1: BAD2A67119C6F73B6472E1A31B9C157A60A074B5 -SHA256: FD611421C3B41BA267BA7A57B8FAFB29B0B59435D0A796D686C0D3BDD36AFF7D +MD5: 5CBDA8012D773C5EC362D21C4EA3B7FB +SHA1: 7A34FAA0E11F09F529FF38EC3239211CD87CB1A7 +SHA256: 123066DAFBF6F2AA0E1924296CFEFE1213002D7760E8797AB74F1FC1D683C6D7 Signature for ISO image: -https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.290-20240229.iso.sig +https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.300-20240401.iso.sig Signing key: https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/master/KEYS @@ -26,22 +26,22 @@ wget https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/ma Download the signature file for the ISO: ``` -wget https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.290-20240229.iso.sig +wget https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.300-20240401.iso.sig ``` Download the ISO image: ``` -wget https://download.securityonion.net/file/securityonion/securityonion-2.3.290-20240229.iso +wget https://download.securityonion.net/file/securityonion/securityonion-2.3.300-20240401.iso ``` Verify the downloaded ISO image using the signature file: ``` -gpg --verify securityonion-2.3.290-20240229.iso.sig securityonion-2.3.290-20240229.iso +gpg --verify securityonion-2.3.300-20240401.iso.sig securityonion-2.3.300-20240401.iso ``` The output should show "Good signature" and the Primary key fingerprint should match what's shown below: ``` -gpg: Signature made Wed 28 Feb 2024 04:11:05 PM EST using RSA key ID FE507013 +gpg: Signature made Wed 27 Mar 2024 01:42:18 PM EDT using RSA key ID FE507013 gpg: Good signature from "Security Onion Solutions, LLC " gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. diff --git a/sigs/securityonion-2.3.300-20240401.iso.sig b/sigs/securityonion-2.3.300-20240401.iso.sig new file mode 100644 index 000000000..39bfcd7a8 Binary files /dev/null and b/sigs/securityonion-2.3.300-20240401.iso.sig differ