diff --git a/source/manual/install.rst b/source/manual/install.rst index e98e9293..d503e582 100644 --- a/source/manual/install.rst +++ b/source/manual/install.rst @@ -220,6 +220,12 @@ If checksums match continue with the verification commands. openssl dgst -sha256 -verify OPNsense-.pub -signature /tmp/image.sig OPNsense-. +.. Warning:: + + Make sure to unpack the image using :code:`bunzip2` before verifying. Our signatures are generated before compressing them + (as of OPNsense version 24.1) + + If the output of the second command is “**Verified OK**”, your image file was verified successfully, and its safe to install from it. Any other outputs, and you may need to check your commands for errors, or the image file may have been compromised.